#3872 (ok 4.0.0-rc2) CSP blocks map tiles in GIS data visualization

[Madhura Jayaratne]

Steps to reproduce:
Go to opengis.world_cities table in the demo site
Click 'Visualize GIS data' from query results section
Tick 'Use OpenStreetMaps as base layer'

Map tiles are not loaded due to the CSP directive. CSP related errors can be seen on the console.

[Marc Delisle]

Madhura,
with FF 20.0.1 and QA_4_0 branch, I cannot reproduce this problem (either on the demo server or mine). It's true that I see CSP errors on the console when viewing the demo server, but these are due to demo-server issues like calling piwik.js.
Which browser are you using, and which branch on the demo server?

[Madhura Jayaratne]

Do you see the OpenStreetMap tiles loaded as the base layer for the data points?

With Chrome 26.0.1410.64, tiles do not get loaded and I see the CSP errors on console for both QA_4_0 (tested locally) and master (tested at demo.phpmyadmin.net/master-config/; see the attached screenshot)

With FF 19.0.2, tiles do not get loaded while I do not see the CSP errors on console for both QA_4_0 and master.

[Marc Delisle]

Madhura,I see what you mean now. I'll test under https and report to you.

[Marc Delisle]

Madhura,
Testing pull request 247 on a server supporting both http and https, I try with http and see the tiles (all continents and country names). Then I switch to https and no longer see the tiles, is this expected?

[Madhura Jayaratne]

Yes Marc. If we are to add openstreetmaps URLs to the CSP header under HTTPS, I think insecure connection warnings (https://sourceforge.net/p/phpmyadmin/bugs/3649/, https://sourceforge.net/p/phpmyadmin/bugs/3609/, https://sourceforge.net/p/phpmyadmin/bugs/3303/) should be back.