CityStrides Profile Link
Message
Using the Chromium-based Helium Browser, I’m getting a CSP violation error on any page trying to load a map:
Connecting to 'https://api.mapbox.com.x.7dcbc35d0b39104596081ed037b3122b5f77.9270fa5c.id.opendns.com/s/api.mapbox.com/styles/v1/citystrides/cmjdfux9n000k01s1gdo33tvh?X-OpenDNS-Session=_7dcbc35d0b39104596081ed037b3122b5f779270fa5c_7JBmNQEy_sdk=js-3.34.1&access_token=pk.eyJ1IjoiY2l0eXN0cmlkZXMiLCJhIjoiY2p2enE5aWxyMDMwNzRhcGk3M2lqeTBkciJ9.6hf3QS5XTni7ATSkEJ4GuQ' violates the following Content Security Policy directive: "connect-src 'self' s3.amazonaws.com wss://citystrides.com wss://ac.citystrides.com citystrides.com ac.citystrides.com analytics.citystrides.com errors.citystrides.com geojson.citystrides.com tiles-a.citystrides.com tiles-b.citystrides.com tiles-c.citystrides.com connect.garmin.com api.honeybadger.io a.tiles.mapbox.com b.tiles.mapbox.com api.mapbox.com events.mapbox.com www.mapmyfitness.com bam.nr-data.net api.stadiamaps.com www.strava.com api.stripe.com". The action has been blocked.
looks like the mapbox opendns domain isn’t on the allow list. Not sure why this is okay in other browsers, maybe Helium has stricter CSP checking?