test: align CSP expectation with current img-src that allows blob

This commit is contained in:
3252a8
2026-05-16 00:04:42 +03:00
parent 55dce99d34
commit 3298dc3e77
+1 -1
View File
@@ -373,7 +373,7 @@ class WebAppSecurityTests(unittest.IsolatedAsyncioTestCase):
csp = response.headers["Content-Security-Policy"]
self.assertNotIn("'unsafe-eval'", csp)
self.assertIn("img-src 'self' data: https:;", csp)
self.assertIn("img-src 'self' data: blob: https:;", csp)
self.assertNotIn("img-src 'self' data: https: http:;", csp)