[openstreetmap/openstreetmap-website] Allow loading of map image tiles from other domains (Issue #3572)

[Tom Hughes]

Firstly that is not CORS that is CSP.

Secondly we declare all the servers we use - if you decide to patch the site in your browser that you get to pick up the pieces. We're not going to reduce security for all our users just so you can play silly buggers.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/3572#issuecomment-1157065695
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/issues/3572/1157065695 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20220615/2bf1a87f/attachment.htm>