[openstreetmap/openstreetmap-website] Image download w/ submit_tag (PR #6192)

[mmd]

mmd-osm left a comment (openstreetmap/openstreetmap-website#6192)

I'm using the code below, which includes `Access-Control-Request-Headers: x-csrf-token,x-turbo-request-id` in the request.

The preflight fails, because we're not allowing these headers:

Reason: header ‘x-csrf-token’ is not allowed according to header ‘Access-Control-Allow-Headers’ from CORS preflight response




```
diff --git a/app/views/share_panes/show.html.erb b/app/views/share_panes/show.html.erb
index 23f46dc4d..f4ae5ac95 100644
--- a/app/views/share_panes/show.html.erb
+++ b/app/views/share_panes/show.html.erb
@@ -40,7 +40,7 @@
       <% end %>
     </ul>
   </div>
-  <form id="export-image" action="/export/finish" method="post">
+  <form id="export-image" action="/export/finish" method="post" data-turbo="true">
     <div class="row mb-3">
       <label for="mapnik_format" class="col-auto col-form-label"><%= t ".format" %></label>
       <div class="col-auto">
```

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/6192#issuecomment-3079760090
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/6192/c3079760090 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20250716/551550e2/attachment-0001.htm>