aboutsummaryrefslogtreecommitdiffstats
path: root/tests
diff options
context:
space:
mode:
authorVincent Petry <vincent@nextcloud.com>2022-05-05 17:26:48 +0200
committerGitHub <noreply@github.com>2022-05-05 17:26:48 +0200
commit7718c9776c5903474b8f3cf958cdd18a53b2449e (patch)
treea5b2a2535f7a2aea6fbce361df6a52b3e229ad85 /tests
parent0690646d09430ce363b07bc2cd59283e303314eb (diff)
parent18c013d8fc0d95249136799c5c0e67994766d953 (diff)
downloadnextcloud-server-7718c9776c5903474b8f3cf958cdd18a53b2449e.tar.gz
nextcloud-server-7718c9776c5903474b8f3cf958cdd18a53b2449e.zip
Merge pull request #32113 from nextcloud/bugfix/noid/fix-csp-merging-bools
Add CSP policy merge priority for booleans
Diffstat (limited to 'tests')
-rw-r--r--tests/lib/Security/CSP/ContentSecurityPolicyManagerTest.php3
1 files changed, 2 insertions, 1 deletions
diff --git a/tests/lib/Security/CSP/ContentSecurityPolicyManagerTest.php b/tests/lib/Security/CSP/ContentSecurityPolicyManagerTest.php
index e5cf9ea9e1f..082ef46330d 100644
--- a/tests/lib/Security/CSP/ContentSecurityPolicyManagerTest.php
+++ b/tests/lib/Security/CSP/ContentSecurityPolicyManagerTest.php
@@ -87,6 +87,7 @@ class ContentSecurityPolicyManagerTest extends TestCase {
$policy->addAllowedFontDomain('mydomain.com');
$policy->addAllowedImageDomain('anotherdomain.de');
$policy->useStrictDynamic(true);
+ $policy->allowEvalScript(true);
$e->addPolicy($policy);
});
@@ -96,7 +97,7 @@ class ContentSecurityPolicyManagerTest extends TestCase {
$policy->addAllowedFontDomain('example.com');
$policy->addAllowedImageDomain('example.org');
$policy->allowInlineScript(true);
- $policy->allowEvalScript(true);
+ $policy->allowEvalScript(false);
$e->addPolicy($policy);
});