mirror of https://github.com/openclaw/openclaw.git
13 lines
507 B
TypeScript
13 lines
507 B
TypeScript
import { describe, expect, it } from "vitest";
|
|
import { buildControlUiCspHeader } from "./control-ui-csp.js";
|
|
|
|
describe("buildControlUiCspHeader", () => {
|
|
it("blocks inline scripts while allowing inline styles", () => {
|
|
const csp = buildControlUiCspHeader();
|
|
expect(csp).toContain("frame-ancestors 'none'");
|
|
expect(csp).toContain("script-src 'self'");
|
|
expect(csp).not.toContain("script-src 'self' 'unsafe-inline'");
|
|
expect(csp).toContain("style-src 'self' 'unsafe-inline'");
|
|
});
|
|
});
|