Reverse Search by ID to improve security about photon

[mtmail]

Photon returns osm_type and osm_id which can be used an unique identifier of a place. There are no plans to allow searching Photon by those #720

You can use Nominatim (https://nominatim.org/release-docs/develop/api/Lookup/) or Overpass API (https://wiki.openstreetmap.org/wiki/Overpass_API/Overpass_QL#By_element_id) which allow searching by those values.

That's a security issue and a vulnerable API.

The Photon API isn't vulnerable, it returns place data given a query. Your attack scenario might be a security issue on your website and Photon might be the wrong tool for your use case.

[kw005]

@you can use Nominatim: A curl request to an external site has also other issues (performance, no independency, DNS Firewall, API/layout change, too many curl calls for a big website etc. - just too many variables).

The attack scenario is a general issue, every user can intercept requests.

It was just a feature wish. It would be quite helpful to have it.

[mtmail]

Nominatim and Overpass API are installable software, like photon.