melabidi/carmanagement
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Updated the homepage CSP for the new browser error.
Build & Deploy / Build & Push Docker Image (push) Successful in 3m1s
Details
Test / Type Check (all packages) (push) Successful in 57s
Details
Build & Deploy / Deploy to VPS (push) Successful in 4s
Details
Test / API Unit Tests (push) Successful in 49s
Details
Test / Homepage Unit Tests (push) Successful in 43s
Details
Test / Storefront Unit Tests (push) Successful in 42s
Details
Test / Admin Unit Tests (push) Successful in 42s
Details
Test / Dashboard Unit Tests (push) Successful in 42s
Details
Test / API Integration Tests (push) Successful in 1m0s
Details

Browse Source
This commit is contained in:
root
2026-07-02 00:30:30 -04:00
parent 0ddf67c754
commit 330fc11791
2 changed files with 5 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/homepage/tests/unit/csp.test.ts
+3 -4
View File
@@ -9,14 +9,13 @@ describe('CSP foundation', () => {
expect(second).not.toBe(first);
});
it('allows development evaluation only in development', () => {
it('allows required runtime evaluation without enabling development-only sources', () => {
expect(buildContentSecurityPolicy('abc', true)).toContain("'unsafe-eval'");
expect(buildContentSecurityPolicy('abc', false)).not.toContain("'unsafe-eval'");
expect(buildContentSecurityPolicy('abc', false)).toContain("'unsafe-eval'");
expect(buildContentSecurityPolicy('abc', false)).toContain("'nonce-abc'");
expect(buildContentSecurityPolicy('abc', false)).toContain(
"style-src 'self' 'nonce-abc' 'unsafe-hashes' 'sha256-zlqnbDt84zf1iSefLU/ImC54isoprH/MRiVZGskwexk='",
"style-src 'self' 'unsafe-inline'",
);
expect(buildContentSecurityPolicy('abc', false)).not.toContain("'unsafe-inline'");
expect(buildContentSecurityPolicy('abc', false)).toContain("frame-ancestors 'none'");
});
});