mirror of https://github.com/sgoudham/carbon.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
40 lines
1.3 KiB
JavaScript
40 lines
1.3 KiB
JavaScript
/* global cy */
|
|
import { editorVisible } from '../support'
|
|
|
|
describe('security', () => {
|
|
it('should not alert from bg query parameter', () => {
|
|
const stub = cy.stub()
|
|
cy.on('window:alert', stub)
|
|
|
|
// https://github.com/carbon-app/carbon/issues/192
|
|
cy.visit(`?bg=rgba(171, 184, 195, 1)</style><img src="" onerror="alert('xss')" /><!--`)
|
|
|
|
editorVisible()
|
|
|
|
expect(stub).not.to.be.called
|
|
})
|
|
it('security headers', () => {
|
|
cy.request('/').should(response => {
|
|
expect(response.headers).to.include({
|
|
'x-frame-options': 'SAMEORIGIN',
|
|
'x-xss-protection': '1; mode=block',
|
|
'x-content-type-options': 'nosniff',
|
|
'referrer-policy': 'no-referrer-when-downgrade',
|
|
'feature-policy': "geolocation 'self'; microphone 'self'; camera 'self'",
|
|
})
|
|
})
|
|
})
|
|
it('/offsets -> Project Wren', () => {
|
|
cy.visit(`/offsets`)
|
|
cy.url().should('eq', 'https://www.projectwren.com/join/carbon')
|
|
})
|
|
it('/privacy -> Privacy policy', () => {
|
|
cy.visit(`/privacy`)
|
|
cy.url().should('eq', 'https://www.notion.so/PRIVACY-POLICY-e9847a7777714eb08ba15a7a8eaee937')
|
|
})
|
|
it('/terms -> Terms', () => {
|
|
cy.visit(`/terms`)
|
|
cy.url().should('eq', 'https://www.notion.so/TERMS-OF-USE-ff2ce22a7e9848c89c6be46b44297583')
|
|
})
|
|
})
|