Edit: I think it's due to referrer filtering. I can load the tiles fine if I pass 'Referer: https://www.openstreetmap.org', but Firefox sends 'Referer: tile.tracestrack.com'. Presumably that's a measure to preserve privacy, possibly due to some extension (though I've disabled various adblock, tracking protection things...)
For my job, I needed to know whether to dissuade a customer from using the referrer for CSRF protection. I looked for stats on how many people filter this but could find nothing at all. You're the first person I hear runs this in practice, so maybe I can find usage stats on the software you use. Secondarily, I'd be curious how often you run into trouble!
I block referrer headers on Firefox 102.15.1esr; although I use uBlock Origin, for the headers I just set 'network.http.sendRefererHeader' in about:config. There are very few occasions when things don't work. Perhaps once in a week's worth of browsing the Web I'll come across a Cloudflare site that doesn't like me, and these new OpenStreetMap tiles worked yesterday but don't today.
Nope, grey Screen. But like another one commented, I also have the same referrer. I also saw that I somewhat locked down 3rd-party cookies and the tile request doesn't have any cookies. This might be another reason (I haven't checked if there should be a cookie there though)
> It's a feature of uMatrix that's enabled by default
And I don't think uMatrix is all that funky. It works on all other sites, after all(rarely I have to allow-all, but that seemingly does not include the Referer: header)
Works in Firefox on Linux with uBO, Decentraleyes, Privacy Badger, from a German IP address if that makes a difference...
(Tacking more onto uBO reminds me of the dutch/german game where you start by saying "I go on holiday and bring... a book", then the next person has to repeat and tack on one item, and so on, until someone forgets an item. I couldn't quickly find if this exists in english.)
The game seems to exist in many countries/languages.
The reason I was including the extension was because these problems people have with websites usually com down to the extensions they use. At least I don't remember a site not working after opening it in private browsing or if that doesn't help a seperate browser with a different engine.
Parent might like to examine their extensions/network/life choices. I block a shit load of stuff and bizarrely a mapping system used and generated by millions of people just seems to work.
This didn't look very pretty but I still got the menus 8)