CalvinBackup/anonymous_github
1
0
Fork 0
mirror of https://github.com/tdurieux/anonymous_github.git synced 2026-09-12 13:48:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: restore scripts and video playback on project pages

Browse Source
This commit is contained in:
tdurieux
2026-09-08 18:01:32 +02:00
parent f6cbdd97bc
commit 74bd6bb779
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/production-regressions.test.js
+2 -1
View File
@@ -247,7 +247,7 @@ describe("production regressions", function () {
expect(second.headers.ETag).not.to.equal(first.headers.ETag);
expect(second.statusCode).not.to.equal(304);
});
it("decodes webview filenames and sandboxes rendered documents", async function () {
it("decodes webview filenames and allows scripts without same-origin access", async function () {
const File = require("../src/core/AnonymizedFile").default;
const utils = require("../src/server/routes/route-utils");
const repo = { options: { terms: [], page: true, pageSource: { path: "/", branch: "main" }, image: true }, model: { source: { branch: "main" } } };
@@ -260,6 +260,7 @@ describe("production regressions", function () {
await handler({ path: "/repo/my%20file.html", params: { repoId: "repo" }, headers: {} }, res);
expect(path).to.equal("my file.html");
expect(res.headers["Content-Security-Policy"]).to.include("sandbox");
expect(res.headers["Content-Security-Policy"]).to.include("allow-scripts");
expect(res.headers["Content-Security-Policy"]).not.to.include("allow-same-origin");
});
it("terminates the streamer response after a late upstream error", async function () {