class ExportController < ApplicationController
+ before_action :authorize_web
+ before_action :set_locale
+ before_action :update_totp, :only => [:finish]
+ authorize_resource :class => false
- before_filter :authorize_web
- before_filter :set_locale
+ caches_page :embed
- def start
- end
-
- #When the user clicks 'Export' we redirect to a URL which generates the export download
+ # When the user clicks 'Export' we redirect to a URL which generates the export download
def finish
bbox = BoundingBox.from_lon_lat_params(params)
format = params[:format]
- if format == "osm"
- #redirect to API map get
- redirect_to "http://api.openstreetmap.org/api/#{API_VERSION}/map?bbox=#{bbox}"
+ case format
+ when "osm"
+ # redirect to API map get
+ redirect_to :controller => "api/map", :action => "index", :bbox => bbox
- elsif format == "mapnik"
- #redirect to a special 'export' cgi script
+ when "mapnik"
+ # redirect to a special 'export' cgi script
format = params[:mapnik_format]
scale = params[:mapnik_scale]
- redirect_to "http://parent.tile.openstreetmap.org/cgi-bin/export?bbox=#{bbox}&scale=#{scale}&format=#{format}"
+ redirect_to "https://render.openstreetmap.org/cgi-bin/export?bbox=#{bbox}&scale=#{scale}&format=#{format}", :allow_other_host => true
end
end
+
+ def embed
+ append_content_security_policy_directives(
+ :frame_ancestors => %w[*]
+ )
+ end
end