Fix shared run map tile referrer policy

2026-10-01 20:57:04 +10:00
parent e4980d63ab
commit b902ec6312
2 changed files with 3 additions and 2 deletions
@@ -93,7 +93,8 @@ def create_app(config=None):
        response.headers["X-Frame-Options"] = "DENY"
        response.headers["Referrer-Policy"] = "strict-origin-when-cross-origin"
        if request.path.startswith("/shared/runs/"):
-            response.headers["Referrer-Policy"] = "no-referrer"
+            # OSM tiles require a Referer; never include the share token in it.
+            response.headers["Referrer-Policy"] = "strict-origin"
            response.headers["X-Robots-Tag"] = "noindex, nofollow"
        return response