mirror of
https://github.com/nesquena/hermes-webui.git
synced 2026-05-28 12:40:26 +00:00
ai-ag2026
31 lines
1.1 KiB
Python
31 lines
1.1 KiB
Python
"""Tests for KaTeX font CSP handling.
|
|
|
|
KaTeX is vendored locally, so the CSP should not need to loosen font-src for a
|
|
third-party CDN.
|
|
"""
|
|
import pathlib
|
|
|
|
REPO = pathlib.Path(__file__).parent.parent
|
|
HELPERS_PY = (REPO / "api" / "helpers.py").read_text(encoding="utf-8")
|
|
INDEX_HTML = (REPO / "static" / "index.html").read_text(encoding="utf-8")
|
|
UI_JS = (REPO / "static" / "ui.js").read_text(encoding="utf-8")
|
|
|
|
|
|
def _font_src() -> str:
|
|
return HELPERS_PY.split("font-src", 1)[1].split(";", 1)[0]
|
|
|
|
|
|
def test_font_src_keeps_self_and_data_without_cdn_font_exception():
|
|
"""font-src should stay tight now that KaTeX fonts are local."""
|
|
font_src = _font_src()
|
|
assert "'self'" in font_src
|
|
assert "data:" in font_src
|
|
assert "https://cdn.jsdelivr.net" not in font_src
|
|
|
|
|
|
def test_katex_assets_are_loaded_from_static_vendor_paths():
|
|
assert "static/vendor/katex/0.16.22/katex.min.css" in INDEX_HTML
|
|
assert "static/vendor/katex/0.16.22/katex.min.js" in UI_JS
|
|
assert "https://cdn.jsdelivr.net/npm/katex@0.16.22" not in INDEX_HTML
|
|
assert "https://cdn.jsdelivr.net/npm/katex@0.16.22" not in UI_JS
|