Hello,
 
this message is a bug report for
 
The current CSP of https://www.openstreetmap.org/edit (iD editor) prevents using the "download osmChange file" link in Firefox. The link is accessible when clicking on the "save" button. Clicking on the link currently triggers no change in the GUI but an error message in the browser console is logged:
 
    Content Security Policy: The page’s settings blocked the loading of a
    resource at blob:https://www.openstreetmap.org/<uuid> ("frame-src").
 
The current CSP is:
 
    default-src 'self'; ... frame-src 'self'; ...
 
So I think that `blob:` should be added to `frame-src`.
 
Regards
 
_______________________________________________
dev mailing list
dev@openstreetmap.org
https://lists.openstreetmap.org/listinfo/dev

Reply via email to