OSM's tile usage policy requires a Referer header identifying the site. strict-origin-when-cross-origin is the current browser default and sends the origin on HTTPS→HTTPS cross-origin requests; pinning it explicitly prevents silently losing the header if a browser default ever changes. |
||
|---|---|---|
| .. | ||
| components | ||
| controllers | ||
| live | ||
| plugs | ||
| endpoint.ex | ||
| gettext.ex | ||
| router.ex | ||
| telemetry.ex | ||
| user_auth.ex | ||