kellpossible / avalanche-report

A simple self-hosted web server for creating and managing an avalanche forecast for a region, along with accepting public observations.
GNU Affero General Public License v3.0
20 stars 1 forks source link

Tracestrack and MapTiler map layers don't work in Facebook browser or on safari ios #65

Open kellpossible opened 6 months ago

kellpossible commented 6 months ago

I have no idea why...

kellpossible commented 6 months ago

It seems like the api key which is bound to the referrer isn't working in facebook browser, perhaps the facebook browser is not providing the correct referrer?

kellpossible commented 6 months ago

If this is true, it effectively means that their referrer based authentication is completely useless. It's already insecure because people can spoof the header if they want.