Merge branch 'main' of https://github.com/GSA/notifications-admin into 636-remove-uk-requirements

This commit is contained in:
Jonathan Bobel
2023-08-03 14:54:09 -04:00
2 changed files with 120 additions and 121 deletions

View File

@@ -11,7 +11,6 @@ def test_owasp_useful_headers_set(
assert response.headers['X-Frame-Options'] == 'deny'
assert response.headers['X-Content-Type-Options'] == 'nosniff'
assert response.headers['X-XSS-Protection'] == '1; mode=block'
csp = response.headers['Content-Security-Policy']
assert search(r"default-src 'self' static\.example\.com;", csp)
assert search(r"frame-ancestors 'none';", csp)