marisen
Joined 4 years ago
Joined 4 years ago
To contribute a bookcase, ask them to create an OSM account, log in with OAuth, and send the edit straight to OSM.
Book corners becomes just a custom view and editor over OSM data, instead of being its own database.
Users are now responsible for the data they submit (OSM already has tools to deal with vandalism etc...).
I'm pretty sure this is just plain false. Do you have an exemple?
1. content security policies should always be used to prevent such scripts (here they would prevent execution of scripts from the SVG)
2. The JavaScript ecosystem should be making ` --disallow-code-generation-from-strings` a default recommendation when running NodeJS on the server.
Vercel (and other nodejs as a service providers) should warn customers that don't use CSP and `--disallow-code-generation-from-strings` that their settings should be improved.
There are a bunch of other NodeJS flags that maybe you should look into too: https://sgued.fr/blog/react-rce/#node-js-mitigations
I say that as someone that thinks Rust's learning curve is the main reason it rarely makes economic sense to use it.
This is obvious by looking at the coverage the world. France it where the majority of the coverage is. The coverage of most cities is actually pretty impressive for a young project.
While the UI and coverage is not necessarily on par with street view, it's still pretty usable in France.
Secondly Panoramax is first built for OSM contributors/mappers, not for end users. The blog reflects this in the tldr: "If you are interested in contributing"
https://wiki.openstreetmap.org/wiki/Go_Map!!