Datasette-Leaflet 0.3 Fixes OpenStreetMap Tile Referrer Policy
The datasette-leaflet plugin for Datasette released version 0.3, changing tile requests' Referrer-Policy from no-referrer to strict-origin-when-cross-origin to comply with OpenStreetMap's referrer requirements for its hosted tile servers. The change passes only the host, not the full page path, and is a small compatibility fix.
Related Entities
Full Report
OpenStreetMap have a very reasonable policy that hits to their hosted tile server should send a referrer header. Datasette table pages used the Referrer-Policy: no-referrer HTTP header, causing plugins that loaded tiles from OpenStreetMap to violate that policy.
datasette-leaflet is the plugin that loads a bundled Leaflet so other Datasette plugins can depend on it. It now sets the referrer policy on the tile requests themselves to strict-origin-when-cross-origin, passing the host but not the full path to the page.