Kharec/goyco
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test(e2e): align security header checks with CSP-only XSS defense

Browse Source
This commit is contained in:
Sandro CURY CAZZANIGA
2026-05-06 20:13:56 +02:00
parent 0fbb6f4a88
commit 194884293f
1 changed files with 0 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/e2e/security_test.go
-2
View File
@@ -547,7 +547,6 @@ func TestE2E_SecurityHeadersEnhanced(t *testing.T) {
expectedHeaders := map[string]string{ expectedHeaders := map[string]string{
"X-Content-Type-Options": "nosniff", "X-Content-Type-Options": "nosniff",
"X-Frame-Options": "DENY", "X-Frame-Options": "DENY",
"X-XSS-Protection": "1; mode=block",
"Referrer-Policy": "strict-origin-when-cross-origin", "Referrer-Policy": "strict-origin-when-cross-origin",
} }
@@ -707,7 +706,6 @@ func TestE2E_SecurityHeaderCombinations(t *testing.T) {
requiredHeaders := []string{ requiredHeaders := []string{
"X-Content-Type-Options", "X-Content-Type-Options",
"X-Frame-Options", "X-Frame-Options",
"X-XSS-Protection",
"Referrer-Policy", "Referrer-Policy",
"Content-Security-Policy", "Content-Security-Policy",
} }