pnorman left a comment (openstreetmap/openstreetmap-website#6595)
> Does the CORS configuration also need to exempt localhost explicitly, or does
> the exception for 127.0.0.1 already cover that?
It needs to list localhost explicitly. I'll add that [to the
section](https://github.com/openstreetmap/vectortile-website/blob/main/default.conf#L1-L7).
For reasons unrelated to this issue I don't recommend using localhost but
recommend 127.0.0.1 instead as the latter is always a secure origin.
> The requests look identical to me with and without this
They should be to different URLs
> It was my test environment but not running on localhost as such, running as
> osm.compton.nu
I'm not sure of a good way to accommodate test locations on other domains.
Obviously I can add them as they come up but I'd prefer a more systematic
solution.
--
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/6595#issuecomment-3629893174
You are receiving this because you are subscribed to this thread.
Message ID:
<openstreetmap/openstreetmap-website/pull/6595/[email protected]>
_______________________________________________
rails-dev mailing list
[email protected]
https://lists.openstreetmap.org/listinfo/rails-dev