17 lines
669 B
TypeScript
17 lines
669 B
TypeScript
|
import assert from 'node:assert/strict';
|
||
|
|
import { readFileSync } from 'node:fs';
|
||
|
|
import { describe, test } from 'node:test';
|
||
|
|
|
||
|
|
const source = readFileSync(new URL('./webviewHtml.ts', import.meta.url), 'utf8');
|
||
|
|
|
||
|
|
describe('VS Code webview content security policy', () => {
|
||
|
|
test('allows blob URLs for workers without allowing blob scripts', () => {
|
||
|
|
const workerSource = source.match(/const workerSrc = ([^\n]+);/)?.[1] ?? '';
|
||
|
|
const scriptSource = source.match(/const scriptSrc = ([^\n]+);/)?.[1] ?? '';
|
||
|
|
|
||
|
|
assert.match(workerSource, /'blob:'/);
|
||
|
|
assert.doesNotMatch(scriptSource, /'blob:'/);
|
||
|
|
assert.match(source, /worker-src \$\{workerSrc\}/);
|
||
|
|
});
|
||
|
|
});
|