[openstreetmap/openstreetmap-website] Use POST for geocoder backends (PR #3958)

[Tom Hughes]

The geocoder backend calls are a private implementation detail and using POST enables request forgery checks and makes scraping of nominatim via the backend calls harder.
You can view, comment on, or merge this pull request online at:

  https://github.com/openstreetmap/openstreetmap-website/pull/3958

-- Commit Summary --

  * Use POST for geocoder backends

-- File Changes --

    M app/assets/javascripts/index/search.js (22)
    M config/routes.rb (6)
    M test/controllers/geocoder_controller_test.rb (48)

-- Patch Links --

https://github.com/openstreetmap/openstreetmap-website/pull/3958.patch
https://github.com/openstreetmap/openstreetmap-website/pull/3958.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/3958
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/3958 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20230307/7426dc7a/attachment.htm>