Hi everyone,

I just upgraded to MAS 9.1.4 and noticed that the map no longer works when I preview a mobile app from the "Application configuration" app.

What I have configured

I have a Map Manager configured as follows:

• Map: <autonumber>
• Description: openstreetmap
• Length and Distance Unit: Kilometers
• Enable map: true
• Map provider name: Open Map
• MAF map component: true
• Open Map provider: Open Street
• Basemap URL: https://tile.openstreetmap.org/{z}/{x}/{y}.png
• Map Initial Extent:
  • Site: BEDFORD

I edited the "mxe.sec.header.Content_Security_Policy" system property and added the OpenStreetMap hostname to the following directives:

• img-src;
• frame-src;
• connect-src;

Expected behavior

The map works in:

• Desktop applications (asset, locations, workorder, ecc...)
• OOB published mobile applications
• OOB mobile applications previewed from the "Application configuration" app.

Current behavior

The map works in:

• Desktop applications (asset, locations, workorder, ecc...)
• OOB published mobile applications

The map does not work in:

• OOB mobile applications previewd from the "Application configuration" app.

Findings

While previewing a mobile application, in the map view I opened the browser console to look for clues.
I noticed that all the calls to OpenStreetMap were blocked due to CSP (Content Security Policy) errors:

This may be related to changes made in the "Maximo Application Framework Configuration Tool", but I'm unsure which version first introduced this issue.
I switched from using the Docker image to customize Graphite mobile apps (in MAS 9.0.x versions) to using the integrated application in Maximo Manage (in the MAS version 9.1.4.)

Has anyone encountered this issue and/or knows if I'm missing some configuration?