cardosofelipe/fast-next-template
Template
1
0
Fork 1
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Update E2E test for security headers to include worker-src validation

Browse Source
This commit is contained in:
Felipe Cardoso
2025-12-26 19:00:11 +01:00
parent 568aad3673
commit 4e357db25d
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
frontend/e2e/security-headers.spec.ts
View File

@@ -34,6 +34,7 @@ test.describe('Security Headers', () => {
expect(csp).toContain("default-src 'self'"); expect(csp).toContain("default-src 'self'");
expect(csp).toContain("frame-ancestors 'none'"); expect(csp).toContain("frame-ancestors 'none'");
expect(csp).toContain("object-src 'none'"); expect(csp).toContain("object-src 'none'");
expect(csp).toContain("worker-src 'self' blob:"); // Required for MSW
}); });
test('should NOT include deprecated security headers', async ({ request }) => { test('should NOT include deprecated security headers', async ({ request }) => {