pnorman left a comment (openstreetmap/openstreetmap-website#6595)

> Does the CORS configuration also need to exempt localhost explicitly, or does 
> the exception for 127.0.0.1 already cover that?

It needs to list localhost explicitly. I'll add that [to the 
section](https://github.com/openstreetmap/vectortile-website/blob/main/default.conf#L1-L7).
 For reasons unrelated to this issue I don't recommend using localhost but 
recommend 127.0.0.1 instead as the latter is always a secure origin.

> The requests look identical to me with and without this

They should be to different URLs

> It was my test environment but not running on localhost as such, running as 
> osm.compton.nu

I'm not sure of a good way to accommodate test locations on other domains. 
Obviously I can add them as they come up but I'd prefer a more systematic 
solution.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/6595#issuecomment-3629893174
You are receiving this because you are subscribed to this thread.

Message ID: 
<openstreetmap/openstreetmap-website/pull/6595/[email protected]>
_______________________________________________
rails-dev mailing list
[email protected]
https://lists.openstreetmap.org/listinfo/rails-dev

Reply via email to