[jira] [Commented] (OFBIZ-9991) OpenStreetMap geolocation no longer works

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-9991?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16262368#comment-16262368 ]

Jacques Le Roux commented on OFBIZ-9991:
----------------------------------------

This is due to the CSP policy I put in OFBiz recently. Normally it only reports in js console but due to something I changed in FF (not an addon it seems, I guess I change something in FF config. Anyway I have just installed 3 others CSP related addons :D) it got blocked.

This is a good news because it seems we have no other case like that, to be checked though... And yes attackers can use images: https://thehackernews.com/2015/06/Stegosploit-malware.html

> OpenStreetMap geolocation no longer works
> -----------------------------------------
>
>                 Key: OFBIZ-9991
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-9991
>             Project: OFBiz
>          Issue Type: Bug
>          Components: example
>    Affects Versions: Trunk
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Minor
>         Attachments: Screen Shot 2017-11-20 at 19.08.29.png
>
>
> Easily checked at https://demo-trunk.ofbiz.apache.org/example/control/ExampleOsmGeoLocationPointSet1
> It "works" but OpenStreetMap images are not showing. Locally there are no errors in log. So hopefully it could be just an OpenStreetMap setting change we need to do

--
This message was sent by Atlassian JIRA
(v6.4.14#64029)