From: Tom Hughes <tom@compton.nu>
Date: Tue, 3 Sep 2024 16:47:03 +0000 (+0100)
Subject: Drop crossdomain policy for OAuth 1 API methods
X-Git-Tag: live~171
X-Git-Url: https://git.openstreetmap.org./rails.git/commitdiff_plain/2af5094742c543116e1c65bd4e0a1f989ad848c8?ds=inline

Drop crossdomain policy for OAuth 1 API methods
---

diff --git a/public/oauth/crossdomain.xml b/public/oauth/crossdomain.xml
deleted file mode 100644
index a8029a905..000000000
--- a/public/oauth/crossdomain.xml
+++ /dev/null
@@ -1,7 +0,0 @@
-<?xml version="1.0"?>
-<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
-
-<cross-domain-policy>
-	<allow-access-from domain="*" secure="false"/>
-	<allow-http-request-headers-from domain="*" headers="*" secure="false"/>
-</cross-domain-policy>