CGM_Public/pretix_original
3
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-17 11:56:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Don't check CSP on JSON responses

Browse Source
This commit is contained in:
luelista
2026-08-07 12:10:10 +02:00
committed by GitHub
parent dfd88e4007
commit d92f91c19e
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/tests/control/test_views.py
+1
View File
@@ -226,6 +226,7 @@ def test_one_view(logged_in_client, url, expected, event, item, item_category, o
assert response.status_code == expected assert response.status_code == expected
# Do not reintroduce any CSP nonces into control responses, as discussed in PR #6387 # Do not reintroduce any CSP nonces into control responses, as discussed in PR #6387
if response['Content-Type'] != 'application/json':
assert 'script-src' in response['Content-Security-Policy'] assert 'script-src' in response['Content-Security-Policy']
assert 'nonce-' not in response['Content-Security-Policy'] assert 'nonce-' not in response['Content-Security-Policy']