Restrict map tile url to https protocol

MoonE · MoonE · commit 981bc3e4cba2 · 2026-03-08T01:00:11.000+01:00
Signed-off-by: Maximilian Krög &lt;maxi_kroeg@web.de&gt;
diff --git a/src/Header.php b/src/Header.php
@@ -419,7 +419,7 @@ public function getPageTitle(): string
     /** Get the Content-Security-Policy header */
     private function getCspHeader(): string
     {
-        $mapTileUrl = ' tile.openstreetmap.org';
+        $mapTileUrl = ' https://tile.openstreetmap.org';
         $cspAllow = $this->config->config->CSPAllow === '' ? '' : ' ' . $this->config->config->CSPAllow;
         $captchaUrl =
             $this->config->config->CaptchaLoginPrivateKey === '' ||

Original file line number	Diff line number	Diff line change
`@@ -419,7 +419,7 @@ public function getPageTitle(): string`
`419`	`419`	`/** Get the Content-Security-Policy header */`
`420`	`420`	`private function getCspHeader(): string`
`421`	`421`	`{`
`422`		`- $mapTileUrl = ' tile.openstreetmap.org';`
	`422`	`+ $mapTileUrl = ' https://tile.openstreetmap.org';`
`423`	`423`	`$cspAllow = $this->config->config->CSPAllow === '' ? '' : ' ' . $this->config->config->CSPAllow;`
`424`	`424`	`$captchaUrl =`
`425`	`425`	`$this->config->config->CaptchaLoginPrivateKey === '' \|\|`