From: Tom Hughes <tom@compton.nu>
Date: Mon, 27 May 2024 09:46:38 +0000 (+0100)
Subject: Merge remote-tracking branch 'upstream/pull/4837'
X-Git-Tag: live~1024
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/26af28b7cb72f128b3426ab663dd6f042cfd6642?hp=2a657a969b855bfb6f91e8c4d21e5f4f7ebe08c7

Merge remote-tracking branch 'upstream/pull/4837'
---

diff --git a/app/assets/javascripts/index/browse.js b/app/assets/javascripts/index/browse.js
index 69d625eca..7a761b500 100644
--- a/app/assets/javascripts/index/browse.js
+++ b/app/assets/javascripts/index/browse.js
@@ -58,7 +58,7 @@ OSM.initializeBrowse = function (map) {
               .click(cancel))),
         $("<p class='alert alert-warning'>")
           .text(I18n.t("browse.start_rjs.feature_warning", { num_features: count, max_features: limit })),
-        $("<input type='submit' class='btn btn-primary'>")
+        $("<input type='submit' class='btn btn-primary d-block mx-auto'>")
           .val(I18n.t("browse.start_rjs.load_data"))
           .click(add)));
   }
diff --git a/app/assets/stylesheets/common.scss b/app/assets/stylesheets/common.scss
index 4df8b4c2d..1517195f0 100644
--- a/app/assets/stylesheets/common.scss
+++ b/app/assets/stylesheets/common.scss
@@ -489,16 +489,6 @@ body.small-nav {
 
 .donate-attr { color: darken($green, 10%) !important; }
 
-/* Rules for the sidebar */
-
-#browse_status {
-  input {
-    display: block;
-    margin-left: auto;
-    margin-right: auto;
-  }
-}
-
 /* Temporary label size override until we remove site-wide font customisation */
 
 form {
@@ -580,10 +570,6 @@ tr.turn {
 
 .routing_marker { width: 15px; cursor: move; }
 
-.browse_status {
-  display: none;
-}
-
 /* Rules for the history sidebar */
 
 #sidebar .changesets {
diff --git a/app/controllers/site_controller.rb b/app/controllers/site_controller.rb
index 172be5653..8b742a585 100644
--- a/app/controllers/site_controller.rb
+++ b/app/controllers/site_controller.rb
@@ -18,8 +18,7 @@ class SiteController < ApplicationController
 
   content_security_policy(:only => :id) do |policy|
     policy.connect_src("*")
-    policy.img_src("*", :blob)
-    policy.script_src(*policy.script_src, "dev.virtualearth.net", :unsafe_eval)
+    policy.img_src(*policy.img_src, "*", :blob)
     policy.style_src(*policy.style_src, :unsafe_inline)
   end