[openstreetmap/openstreetmap-website] Use $.ajax instead of iframe to make remote control requests (PR #3760)

[Tom Hughes]

@tomhughes requested changes on this pull request.

The reason this is erroring is not because of CORS it's because the CSP is not allowing the XHR fetches - the rules at https://github.com/openstreetmap/openstreetmap-website/blob/master/app/controllers/application_controller.rb#L289 need to be changed to move the 127.0.0.1 rules from `child_src` and `frame_src` to `connect_src`.



-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/3760#pullrequestreview-1208969420
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/3760/review/1208969420 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20221207/c88bc451/attachment.htm>