403 Access blocked, open-street-maps

Which tool versions are you using?

SDK: v14.x.x
Platform: v24.x.x
Python: v3.x
Isolation mode: venv/docker

Current Behavior

We use Leaflet open-street-maps in the web view, but we get this error for the map tiles (in firefox it works correctly, but in google chrome for example it does not):

Expected Behavior

…

Context (optional, but preferred)

…

Hi Luuk,

Thank you for raising this. The tile requests from the WebView reach OpenStreetMap without a Referer header. Apparently, they have started rejecting requests that do not have a Referer header included. The header is missing because of the sandbox settings on the WebView, which for security reasons we cannot relax at the moment. Firefox derives and sends a referrer under these settings, which is why the problem appears in Chrome only.

We are working on serving WebViews in a different way, which would allow us to relax the sandbox settings. That should, among other things, also resolve this behaviour. I will keep you posted once I know more about when we expect this change in production.

In the meantime, a tile provider that does not rely on the Referer header, for example one that authenticates with an API key in the request, will work inside the current sandbox.

Regards,

Raoul