Fixing the specs. Take 2.
This commit is contained in:
parent
2e8c23f0d0
commit
c068804a0a
|
@ -536,7 +536,6 @@ RSpec.describe ApplicationController do
|
|||
script_src = parse(response.headers['Content-Security-Policy'])['script-src']
|
||||
|
||||
expect(script_src).to include('example.com')
|
||||
expect(script_src).to include("'unsafe-eval'")
|
||||
end
|
||||
|
||||
it 'does not set CSP when responding to non-HTML' do
|
||||
|
|
Loading…
Reference in New Issue