test: align CSP expectation with current img-src that allows blob
This commit is contained in:
@@ -373,7 +373,7 @@ class WebAppSecurityTests(unittest.IsolatedAsyncioTestCase):
|
|||||||
csp = response.headers["Content-Security-Policy"]
|
csp = response.headers["Content-Security-Policy"]
|
||||||
|
|
||||||
self.assertNotIn("'unsafe-eval'", csp)
|
self.assertNotIn("'unsafe-eval'", csp)
|
||||||
self.assertIn("img-src 'self' data: https:;", csp)
|
self.assertIn("img-src 'self' data: blob: https:;", csp)
|
||||||
self.assertNotIn("img-src 'self' data: https: http:;", csp)
|
self.assertNotIn("img-src 'self' data: https: http:;", csp)
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user