From 857caec8b75a066da576ef6e9ff81a69909a6bbf Mon Sep 17 00:00:00 2001 From: Ole Martin Handeland Date: Thu, 10 Sep 2026 11:32:45 +0200 Subject: [PATCH] fix(map): send referrer with tile requests OpenStreetMap now blocks web tile requests without a valid Referer header. Set a per-tile referrer policy so local environments still identify their origin when loading the HTTPS tile service, even if the page-level policy is restrictive. --- src/layout/Map/MapComponent.test.tsx | 5 ++++- src/layout/Map/features/layers/MapLayers.tsx | 1 + 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/src/layout/Map/MapComponent.test.tsx b/src/layout/Map/MapComponent.test.tsx index f0b278cc3b..909c0fb86f 100644 --- a/src/layout/Map/MapComponent.test.tsx +++ b/src/layout/Map/MapComponent.test.tsx @@ -174,7 +174,10 @@ describe('MapComponent', () => { const tiles = container.querySelectorAll('img.leaflet-tile'); expect(tiles.length).toBeGreaterThan(0); - tiles.forEach((tile) => expect(tile.getAttribute('alt')).toBe('')); + tiles.forEach((tile) => { + expect(tile.getAttribute('alt')).toBe(''); + expect(tile.referrerPolicy).toBe('strict-origin-when-cross-origin'); + }); }); it('should have expression support for latitude and longitude in centerLocation', async () => { diff --git a/src/layout/Map/features/layers/MapLayers.tsx b/src/layout/Map/features/layers/MapLayers.tsx index 7d11c91952..d261a3c8e5 100644 --- a/src/layout/Map/features/layers/MapLayers.tsx +++ b/src/layout/Map/features/layers/MapLayers.tsx @@ -13,6 +13,7 @@ function OurTileLayer({ layer }: { layer: MapTileLayer }) { subdomains={layer.subdomains ?? []} minZoom={layer.minZoom ?? 0} maxZoom={layer.maxZoom ?? 18} + referrerPolicy='strict-origin-when-cross-origin' /> ); }