[openstreetmap/openstreetmap-website] Image download w/ submit_tag (PR #6192)

[Anton Khorev]

AntonKhorev left a comment (openstreetmap/openstreetmap-website#6192)

> CSP doesn't allow render.openstreetmap.org

Easily fixed by allowing them. They are already allowed for `form_action`, just add them to `connect_src` too.

> the required totp cookie would be lost

Would it? Is it even required by the exporter?

> the render site isn't properly handling CORS preflight requests

This sort of works too, `access-control-allow-origin: *` is in the response. However the status is 400 instead of 204, that means *CORS request did not succeed*.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/6192#issuecomment-3078056642
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/6192/c3078056642 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20250716/9e5e56d0/attachment.htm>