Update E2E test for security headers to include worker-src validation

2025-12-26 19:00:11 +01:00
parent 568aad3673
commit 4e357db25d
1 changed files with 1 additions and 0 deletions
--- a/frontend/e2e/security-headers.spec.ts
+++ b/frontend/e2e/security-headers.spec.ts
@@ -34,6 +34,7 @@ test.describe('Security Headers', () => {
    expect(csp).toContain("default-src 'self'");
    expect(csp).toContain("frame-ancestors 'none'");
    expect(csp).toContain("object-src 'none'");
+    expect(csp).toContain("worker-src 'self' blob:"); // Required for MSW
  });

  test('should NOT include deprecated security headers', async ({ request }) => {