[openstreetmap/openstreetmap-website] Content Security Policy prevents sharing (Issue #6214)

[ckdexterhaven]

ckdexterhaven left a comment (openstreetmap/openstreetmap-website#6214)

WOW! Thanks for the super quick response on a Sunday!!
Should I respond here or through the website support?
We were using Chrome, but I get the same error on Firefox, and Edge.
I wanted to confirm that I am on https://www.openstreetmap.org/

I’m building SVG maps so PNG won’t really help.
I’ll sort through some of the comment you’ve made to see if there’s anything I can adjust.
It does work on my iphone – I do get a nice SVG map! … just not on our production PCs.

Thanks Again!
Greg



Greg Hechler
CEO Art Street Interactive, Inc.
***@***.******@***.***>
619 702 5069 direct
877 630 2033 toll free

From: Tom Hughes ***@***.***>
Sent: Sunday, July 20, 2025 10:39 AM
To: openstreetmap/openstreetmap-website ***@***.***>
Cc: Greg Hechler ***@***.***>; Author ***@***.***>
Subject: Re: [openstreetmap/openstreetmap-website] Content Security Policy prevents sharing (Issue #6214)

[Image removed by sender.]tomhughes left a comment (openstreetmap/openstreetmap-website#6214)<https://github.com/openstreetmap/openstreetmap-website/issues/6214#issuecomment-3094668718>

It hasn't been reported because it works for everybody else - as the error you have quoted says self is an allowed target for form-action so if the page has been loaded from www.openstreetmap.org then it should be able to post to www.openstreetmap.org.

So the question is, why is your browser mistakenly claiming it's invalid?

Can you confirm exactly what browser's you've tried because I'm not seeing any problem in Firefox.

—
Reply to this email directly, view it on GitHub<https://github.com/openstreetmap/openstreetmap-website/issues/6214#issuecomment-3094668718>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AEH2DTRYARWFFRR6MI6OSAT3JPH2ZAVCNFSM6AAAAACB6DJDICVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTAOJUGY3DQNZRHA>.
You are receiving this because you authored the thread.Message ID: ***@***.***>


-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/6214#issuecomment-3094749004
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/issues/6214/3094749004 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20250720/214127a6/attachment.htm>