X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/8937099429ef3e30e3431aebc8d8baf266fc3ce8..067290f19f4aa36b89c110280099b77c115d3187:/app/controllers/application_controller.rb diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 3ed5e16a7..71d5e8231 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -333,7 +333,7 @@ class ApplicationController < ActionController::Base append_content_security_policy_directives( :child_src => %w[http://127.0.0.1:8111 https://127.0.0.1:8112], :frame_src => %w[http://127.0.0.1:8111 https://127.0.0.1:8112], - :connect_src => [NOMINATIM_URL, OVERPASS_URL, OSRM_URL, FOSSGIS_OSRM_URL, GRAPHHOPPER_URL], + :connect_src => [NOMINATIM_URL, OVERPASS_URL, FOSSGIS_OSRM_URL, GRAPHHOPPER_URL], :form_action => %w[render.openstreetmap.org], :style_src => %w['unsafe-inline'], :script_src => [MAPQUEST_DIRECTIONS_URL],