Companies map: centre on where you are, when you ask #850

New issue

Closed

opened 2026-10-10 16:01:23 +00:00 by tiagoagueda · 0 comments

tiagoagueda commented

2026-10-10 16:01:23 +00:00

Owner

The map should offer to centre on the person's location, asking the browser's permission.

What exists today

Nothing uses navigator.geolocation. The CSP (config/settings/base.py:703-735) allows only same-origin connections; no Permissions-Policy header is set.
docs/THREAT-MODEL.md:111-130: city level by default, a tile server told nothing unless the operator sets one, a finer pin is an act, not a default.
The map is the SVG overview; zooming arrives with Leaflet in #702.

What would change

A Near me control that, when pressed, asks the browser for the location and centres the view on it, in the browser only: nothing stored, nothing sent.
Permissions-Policy: geolocation=(self), and a sentence in the threat model.

Decisions

Asked on load, or on a button. The request reads ask permission to centre the map. Recommended: on a button, never on load — a prompt the moment a page opens is refused by habit and the promise is that nothing is asked for unasked.
Needs #702's zoomable map; on the world SVG there is nothing to centre.

Checked against main at 8c3d03570. From the maintainer's improvements list of 2026-10-07.

The map should offer to centre on the person's location, asking the browser's permission. ## What exists today - Nothing uses `navigator.geolocation`. The CSP (`config/settings/base.py:703-735`) allows only same-origin connections; no `Permissions-Policy` header is set. - `docs/THREAT-MODEL.md:111-130`: city level by default, a tile server told nothing unless the operator sets one, *a finer pin is an act, not a default*. - The map is the SVG overview; zooming arrives with Leaflet in #702. ## What would change - A *Near me* control that, when pressed, asks the browser for the location and centres the view on it, in the browser only: nothing stored, nothing sent. - `Permissions-Policy: geolocation=(self)`, and a sentence in the threat model. ## Decisions - **Asked on load, or on a button.** The request reads *ask permission to centre the map*. Recommended: on a button, never on load — a prompt the moment a page opens is refused by habit and the promise is that nothing is asked for unasked. - Needs #702's zoomable map; on the world SVG there is nothing to centre. Checked against `main` at `8c3d03570`. From the maintainer's improvements list of 2026-10-07.

tiagoagueda added this to the 0.6.0 milestone

2026-10-10 16:01:23 +00:00

tiagoagueda added the

interface

enhancement

labels

2026-10-10 16:01:23 +00:00

tiagoagueda referenced this issue

2026-10-12 14:16:48 +00:00

Draw the map with Leaflet, over OpenStreetMap tiles by default, with the tile source in Server settings #898

tiagoagueda referenced this issue from a commit

2026-10-12 16:11:44 +00:00