Hacker News Reader

Comment by shrx | Hacker News Reader

For some reason, the Tracestrack Topo layer doesn't load for me in firefox.

Same here, I get 403s from tile.tracestrack.com

Edit: I think it's due to referrer filtering. I can load the tiles fine if I pass 'Referer: https://www.openstreetmap.org', but Firefox sends 'Referer: tile.tracestrack.com'. Presumably that's a measure to preserve privacy, possibly due to some extension (though I've disabled various adblock, tracking protection things...)

What do you use to suppress the referer header?

For my job, I needed to know whether to dissuade a customer from using the referrer for CSRF protection. I looked for stats on how many people filter this but could find nothing at all. You're the first person I hear runs this in practice, so maybe I can find usage stats on the software you use. Secondarily, I'd be curious how often you run into trouble!

It's a feature of uMatrix that's enabled by default

I block referrer headers on Firefox 102.15.1esr; although I use uBlock Origin, for the headers I just set 'network.http.sendRefererHeader' in about:config. There are very few occasions when things don't work. Perhaps once in a week's worth of browsing the Web I'll come across a Cloudflare site that doesn't like me, and these new OpenStreetMap tiles worked yesterday but don't today.

Thanks, changing that setting in uMatrix worked for me.

Same for me, Firefox on Linux. Getting 403's

It does work for me FF/Linux.

Does this work?

    https://www.openstreetmap.org/#map=15/50.9349/-2.6296&layers=P

You should end up with a view of a small town in South Somerset, UK.

Nope, grey Screen. But like another one commented, I also have the same referrer. I also saw that I somewhat locked down 3rd-party cookies and the tile request doesn't have any cookies. This might be another reason (I haven't checked if there should be a cookie there though)

I use Privacy Badger and uBlock Origin in the browser and pfBlocker-ng at the router - that is similar to PiHole.

You mention "I also have the same referrer" - I'm not too sure what that means.

It sounds like you might want to go easy on the funky stuff. Cookies are not totally evil!

Looks like bmicraft might have the answer:

> It's a feature of uMatrix that's enabled by default

And I don't think uMatrix is all that funky. It works on all other sites, after all(rarely I have to allow-all, but that seemingly does not include the Referer: header)

Works on Firefox Android with uBO enabled.

Works in Firefox on Linux with uBO, Decentraleyes, Privacy Badger, from a German IP address if that makes a difference...

(Tacking more onto uBO reminds me of the dutch/german game where you start by saying "I go on holiday and bring... a book", then the next person has to repeat and tack on one item, and so on, until someone forgets an item. I couldn't quickly find if this exists in english.)

The game seems to exist in many countries/languages.

The reason I was including the extension was because these problems people have with websites usually com down to the extensions they use. At least I don't remember a site not working after opening it in private browsing or if that doesn't help a seperate browser with a different engine.

Yeah I understand why it was included, that's also why I added mine :). Sorry if that came across as making fun of your reply!

Loads for me Firefox/Windows.

.. and me FF/Linux.

Parent might like to examine their extensions/network/life choices. I block a shit load of stuff and bizarrely a mapping system used and generated by millions of people just seems to work.

This didn't look very pretty but I still got the menus 8)

    $ links "https://www.openstreetmap.org/#map=19/50.93675/-2.63421&layers=P"

Reply on news.ycombinator.com