openstreetmap.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since openstreetmap.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

max-age=0, private, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; child-src 'self'; font-src 'self'; frame-ancestors 'self'; frame-src 'self'; manifest-src 'self'; media-src 'none'; object-src 'none'; worker-src blob:; connect-src 'self' tile.openstreetmap.org api.thunderforest.com tile.tracestrack.com *.openstreetmap.fr vector.openstreetmap.org api.maptiler.com matomo.openstreetmap.org http://127.0.0.1:8111 https://vector.openstreetmap.org https://api.maptiler.com https://tile.thunderforest.com https://render.openstreetmap.org https://nominatim.openstreetmap.org/ https://query.openstreetmap.org/query-features https://routing.openstreetmap.de/ https://graphhopper.com/api/1/route https://valhalla1.openstreetmap.de/route https://www.wikidata.org/w/api.php https://commons.wikimedia.org; form-action 'self' render.openstreetmap.org tile.thunderforest.com; img-src 'self' data: www.gravatar.com *.wp.com tile.openstreetmap.org gps.tile.openstreetmap.org api.thunderforest.com tile.tracestrack.com *.openstreetmap.fr matomo.openstreetmap.org https://openstreetmap-user-avatars.s3.dualstack.eu-west-1.amazonaws.com https://openstreetmap-gps-images.s3.dualstack.eu-west-1.amazonaws.com https://commons.wikimedia.org upload.wikimedia.org thumb.wikimedia.org; script-src 'self' matomo.openstreetmap.org 'wasm-unsafe-eval' 'nonce-ITs84qnUewECIBYeVeuCrWqrVtVp4xbe'; style-src 'self' 'unsafe-inline' 'nonce-ITs84qnUewECIBYeVeuCrWqrVtVp4xbe'

Strict-Transport-Security

max-age=31536000; includeSubDomains; preload

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://openstreetmap.com/HTTP 301

   → https://www.openstreetmap.org/

2. 2.https://www.openstreetmap.org/HTTP 200

Meta tags

Title

OpenStreetMap

Description

OpenStreetMap is a map of the world, created by people like you and free to use under an open license.

Canonical

https://www.openstreetmap.org/

Robots

Not set

Generator

Not set

Open Graph title

OpenStreetMap

Open Graph description

OpenStreetMap is a map of the world, created by people like you and free to use under an open license.

Open Graph image

https://www.openstreetmap.org/assets/osm_logo_256-ed028f90468224a272961c380ecee0cfb73b8048b34f4b4b204b7f0d1097875d.png

Open Graph type

website

Twitter card

Not set

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

21

Disallow rules (other agents)

0

No Sitemap declared in robots.txt.

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

Related domains