i try to embed a OSM Map via the Share Option on openstreetmap.org If i enable CSP on my Server, the Map will not be loaded. My problem is: I can't figure out which Policies are needed so that http://www.openstreetmap.org/export/embed.html will be loaded on my site. I already tried "frame-src 'self' openstreetmap.org; img-src 'self' *.tile.openstreetmap.org" and also "script-src 'self' openstreetmap.org" but nothing helped.

Could someone tell me the correct settings soi can use OSM Maps and activate CSP?

Kind regard


asked 05 Nov '14, 09:37

Tapsiturtle's gravatar image

accept rate: 0%

After trying a bit around it seems that this is helping in .htaccess: Header set Content-Security-Policy "default-src 'self'; frame-src www.openstreetmap.org; style-src 'self'; script-src 'self' www.openstreetmap.org;"

permanent link

answered 24 Nov '14, 08:21

Tapsiturtle's gravatar image

accept rate: 0%

edited 25 Nov '14, 12:14

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 05 Nov '14, 09:37

question was seen: 7,342 times

last updated: 25 Nov '14, 12:14

powered by OSQA