The Wikimedia map tile server sets this header: access-control-allow-headers: accept, x-requested-with, content-type. But the Map terms of use require setting the User-Agent header, which that CORS header doesn't allow. Additionally, browser JS can't set the User-Agent header at all. I think Api-User-Agent should be added to that CORS header, and the policy should require either User-Agent or Api-User-Agent be set.
Description
Description
Event Timeline
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 30 2020, 2:22 PM2020-03-30 14:22:50 (UTC+0)
LGoto moved this task from Needs triage to Needs investigation on the Product-Infrastructure-Team-Backlog-Deprecated board.
MSantos moved this task from Needs investigation to Backlog on the Product-Infrastructure-Team-Backlog-Deprecated board.May 20 2020, 3:16 PM2020-05-20 15:16:26 (UTC+0)
MSantos moved this task from Kartotherian to Production Infrastructure on the Maps board.Nov 25 2020, 4:13 PM2020-11-25 16:13:48 (UTC+0)