this message is a bug report for
The current CSP of https://www.openstreetmap.org/edit (iD editor) prevents using the "download osmChange file" link in Firefox. The link is accessible when clicking on the "save" button. Clicking on the link currently triggers no change in the GUI but an error message in the browser console is logged:
    Content Security Policy: The page’s settings blocked the loading of a
    resource at blob:https://www.openstreetmap.org/<uuid> ("frame-src").
The current CSP is:
    default-src 'self'; ... frame-src 'self'; ...
So I think that `blob:` should be added to `frame-src`.
dev mailing list

Reply via email to