From c1d3f738e7078106f92b4196b95dfb74e04c5e71 Mon Sep 17 00:00:00 2001 From: Yorick de Wid Date: Sat, 25 Jul 2026 10:11:16 +0000 Subject: [PATCH] Allow OpenFreeMap tiles in the CSP; refresh preconnects The MapLibre swap moved base tiles to tiles.openfreemap.org, which the connect-src whitelist didn't cover - the basemap loaded as a blank canvas while our own sources (matching *.fundermaps.com and *.digitaloceanspaces.com) kept working. Mapbox domains drop out. Co-Authored-By: Claude Fable 5 --- index.html | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/index.html b/index.html index 6cf8e42..e863f60 100644 --- a/index.html +++ b/index.html @@ -27,7 +27,7 @@ style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self'; - connect-src 'self' https://*.mapbox.com https://api.pdok.nl https://*.fundermaps.com https://*.digitaloceanspaces.com https://*.amazonaws.com https://fundermaps-api-test-grcaa.ondigitalocean.app; + connect-src 'self' https://tiles.openfreemap.org https://api.pdok.nl https://*.fundermaps.com https://*.digitaloceanspaces.com https://*.amazonaws.com https://fundermaps-api-test-grcaa.ondigitalocean.app; worker-src 'self' blob:; child-src blob:; base-uri 'self'; @@ -35,8 +35,9 @@ " /> - - + + +