iD icon indicating copy to clipboard operation
iD copied to clipboard

Lost colors in legend GPS overlay

Open deevroman opened this issue 2 months ago • 4 comments

URL

No response

How to reproduce the issue?

  1. Enable OpenStreetMap GPS traces
Image

As it was before:

Image

Screenshot(s) or anything else?

No response

Which deployed environments do you see the issue in?

Released version at openstreetmap.org/edit

What version numbers does this issue effect?

2.37.3

Which browsers are you seeing this problem on?

Firefox

deevroman avatar Nov 11 '25 11:11 deevroman

The inline styles from https://github.com/osmlab/editor-layer-index/blob/gh-pages/sources/world/OpenStreetMap-GPS.geojson are disallowed by a nonce (that disables unsafe-inline) that ends up in the content security policy for some reason. But I can't figure out where that nonce comes from.

hlfan avatar Nov 15 '25 10:11 hlfan

should we transfer this issue to openstreetmap-website? iD doesn't define the CSP itself, it seems like the nonce is defined over there if I'm reading the code right

k-yle avatar Nov 15 '25 11:11 k-yle

Or, we could move this into iD. Those styles are not going to change.

tordans avatar Nov 15 '25 11:11 tordans

Since the "disabling" of unsafe-inline styles breaks so surprisingly little, I'd say remove the need for that completely and override the attribution of the GPS layer.

hlfan avatar Nov 15 '25 15:11 hlfan