From dfd88e4007535d6b17d28084293e9f47c271b929 Mon Sep 17 00:00:00 2001 From: luelista Date: Tue, 28 Jul 2026 13:58:27 +0200 Subject: [PATCH] Test CSP in test_one_view --- src/tests/control/test_views.py | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/src/tests/control/test_views.py b/src/tests/control/test_views.py index 0331b31f3b..608d865f8f 100644 --- a/src/tests/control/test_views.py +++ b/src/tests/control/test_views.py @@ -225,12 +225,8 @@ def test_one_view(logged_in_client, url, expected, event, item, item_category, o response = logged_in_client.get(url) assert response.status_code == expected - -@pytest.mark.django_db -def test_csp_header_control(logged_in_client): # Do not reintroduce any CSP nonces into control responses, as discussed in PR #6387 - response = logged_in_client.get('/control/') - assert response.status_code == 200 + assert 'script-src' in response['Content-Security-Policy'] assert 'nonce-' not in response['Content-Security-Policy']