From: Tom Hughes <tom@compton.nu>
Date: Mon, 31 Dec 2018 09:30:40 +0000 (+0000)
Subject: Allow inline styling on pages that display the map
X-Git-Tag: live~2731
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/801271363d2ce19b7b2d25e9181e7e035d39e35d

Allow inline styling on pages that display the map

Both leaflet itself and at least one of our plugins use inline
styling to style markers so we need to allow it.

Fixes #2093
---

diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index d4bbc1f9b..38758e1df 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -393,6 +393,7 @@ class ApplicationController < ActionController::Base
       :frame_src => %w[http://127.0.0.1:8111 https://127.0.0.1:8112],
       :connect_src => [NOMINATIM_URL, OVERPASS_URL, OSRM_URL, GRAPHHOPPER_URL],
       :form_action => %w[render.openstreetmap.org],
+      :style_src => %w['unsafe-inline'],
       :script_src => [MAPQUEST_DIRECTIONS_URL],
       :img_src => %w[developer.mapquest.com]
     )