🐛 force referrerPolicy for OpenStreetMap tile access

2 files changed, 24 insertions, 2 deletions

diff --git a/ishtar_common/static/gis/js/OLMapWidget.js b/ishtar_common/static/gis/js/OLMapWidget.js
index 22047b86d..bdc34593c 100644
--- a/ishtar_common/static/gis/js/OLMapWidget.js
+++ b/ishtar_common/static/gis/js/OLMapWidget.js
@@ -179,7 +179,19 @@ ol_ext_inherits(GeometryTypeControl, ol.control.Control);
             }
         }
         if (!options.base_layer) {
-            this.options.base_layer = new ol.layer.Tile({source: new ol.source.OSM()});
+            this.options.base_layer = new ol.layer.Tile({
+                source: new ol.source.OSM({
+                    // remove in when switching to OL>= 10.6.1 -> new ol.source.OSM()
+                    tileLoadFunction: (imageTile, src) => {
+                        const img = imageTile.getImage();
+                        // Set the per-image referrer policy before assigning the src
+                        if (img && 'referrerPolicy' in img) {
+                            img.referrerPolicy = 'origin-when-cross-origin';
+                        }
+                        img.src = src;
+                    }
+                })
+            });
         }
 
         this.map = this.createMap();
diff --git a/ishtar_common/static/js/ishtar-map.js b/ishtar_common/static/js/ishtar-map.js
index 46a31c28e..b28f5fe0e 100644
--- a/ishtar_common/static/js/ishtar-map.js
+++ b/ishtar_common/static/js/ishtar-map.js
@@ -192,7 +192,17 @@ var TrackPositionControl = (function (Control) {
 /* base layers */
 
 var source_osm = function(options){
-    options["source"] = new ol.source.OSM();
+    options["source"] = new ol.source.OSM({
+        // remove in when switching to OL>= 10.6.1 -> new ol.source.OSM()
+        tileLoadFunction: (imageTile, src) => {
+            const img = imageTile.getImage();
+            // Set the per-image referrer policy before assigning the src
+            if (img && 'referrerPolicy' in img) {
+                img.referrerPolicy = 'origin-when-cross-origin';
+            }
+            img.src = src;
+        }
+    });
     return new ol.layer.Tile(options);
 };