Page MenuHomePhabricator

Map terms of use: User agent policy impossible to comply with in the browser
Open, LowPublicBUG REPORT

Description

Origin

The Wikimedia map tile server sets this header: access-control-allow-headers: accept, x-requested-with, content-type. But the Map terms of use require setting the User-Agent header, which that CORS header doesn't allow. Additionally, browser JS can't set the User-Agent header at all. I think Api-User-Agent should be added to that CORS header, and the policy should require either User-Agent or Api-User-Agent be set.