[openstreetmap/openstreetmap-website] Switch to shortbread style with absolute URLs (PR #6595)

Paul Norman notifications at github.com
Tue Dec 9 02:14:10 UTC 2025


pnorman left a comment (openstreetmap/openstreetmap-website#6595)

> Does the CORS configuration also need to exempt localhost explicitly, or does the exception for 127.0.0.1 already cover that?

It needs to list localhost explicitly. I'll add that [to the section](https://github.com/openstreetmap/vectortile-website/blob/main/default.conf#L1-L7). For reasons unrelated to this issue I don't recommend using localhost but recommend 127.0.0.1 instead as the latter is always a secure origin.

> The requests look identical to me with and without this

They should be to different URLs

> It was my test environment but not running on localhost as such, running as osm.compton.nu

I'm not sure of a good way to accommodate test locations on other domains. Obviously I can add them as they come up but I'd prefer a more systematic solution.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/6595#issuecomment-3629893174
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/6595/c3629893174 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20251208/a0cfaaaf/attachment.htm>


More information about the rails-dev mailing list