Fix tiles not working on public pages because of missing CSP entries

A CSP entry for https://tile.openstreetmap.org was introduced in 8e9e960, but it was only added to the PageController but it should be added to all the places where the CSP headers are generated. Signed-off-by: chefe <hi@chefe.io>
nextcloud · Jan 1, 2025 · b1dec52 · b1dec52
1 parent d5ec6df
commit b1dec52
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/lib/Controller/PublicFavoritePageController.php b/lib/Controller/PublicFavoritePageController.php
@@ -140,6 +140,7 @@ private function addCsp($response): void {
 			$csp = new ContentSecurityPolicy();
 			// map tiles
 			$csp->addAllowedImageDomain('https://*.tile.openstreetmap.org');
+			$csp->addAllowedImageDomain('https://tile.openstreetmap.org');
 			$csp->addAllowedImageDomain('https://server.arcgisonline.com');
 			$csp->addAllowedImageDomain('https://*.cartocdn.com');
 			$csp->addAllowedImageDomain('https://*.opentopomap.org');

diff --git a/lib/Controller/PublicPageController.php b/lib/Controller/PublicPageController.php
@@ -207,6 +207,7 @@ private function addCsp($response): void {
 			$csp = new \OCP\AppFramework\Http\ContentSecurityPolicy();
 			// map tiles
 			$csp->addAllowedImageDomain('https://*.tile.openstreetmap.org');
+			$csp->addAllowedImageDomain('https://tile.openstreetmap.org');
 			$csp->addAllowedImageDomain('https://server.arcgisonline.com');
 			$csp->addAllowedImageDomain('https://*.cartocdn.com');
 			$csp->addAllowedImageDomain('https://*.opentopomap.org');