Merge pull request #213 from trijpstra-fourlights/chore/1.0.0-rc.1

Baroshem · Sep 21, 2023 · 006e87c · 006e87c
2 parents 75b4184 + dfacfd1
commit 006e87c
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 23 deletions.
diff --git a/test/fixtures/nonce/pages/with-inline-script.vue b/test/fixtures/nonce/pages/with-inline-script.vue
diff --git a/test/nonce.test.ts b/test/nonce.test.ts
@@ -7,7 +7,7 @@ describe('[nuxt-security] Nonce', async () => {
     rootDir: fileURLToPath(new URL('./fixtures/nonce', import.meta.url))
   })
 
-  const expectedNonceElements = 7 // 1 from app.vue/useHead, 6 for nuxt
+  const expectedNonceElements = 8 // 1 from app.vue/useHead, 6 for nuxt, 1 for plugin vue export helper
 
   it('injects `nonce` attribute in response', async () => {
     const res = await fetch('/')
@@ -64,15 +64,6 @@ describe('[nuxt-security] Nonce', async () => {
     expect(cspHeaderValue).toBe("base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data:; object-src 'none'; script-src-attr 'self'  'strict-dynamic'; style-src 'self' ; upgrade-insecure-requests; script-src 'self'  'strict-dynamic'")
   })
 
-  it('does not add nonce to literal strings', async () => {
-    const res = await fetch('/with-inline-script')
-
-    const text = await res.text()
-    const untouchedLiteral = text.includes('var inlineLiteral = \'<script>console.log("example")\'')
-
-    expect(untouchedLiteral).toBe(true)
-  })
-
   it('injects `nonce` attribute in style tags', async () => {
     const res = await fetch('/with-styling')