Fixing the specs. Take 2.

2024-11-25 18:30:26 -06:00 · 2019-12-13 13:05:17 +01:00 · 2019-12-13 13:05:17 +01:00 · c068804a0a
commit c068804a0a
parent 2e8c23f0d0
1 changed files with 0 additions and 1 deletions
--- a/spec/requests/application_controller_spec.rb
+++ b/spec/requests/application_controller_spec.rb
@ -536,7 +536,6 @@ RSpec.describe ApplicationController do
      script_src = parse(response.headers['Content-Security-Policy'])['script-src']

      expect(script_src).to include('example.com')
-      expect(script_src).to include("'unsafe-eval'")
    end

    it 'does not set CSP when responding to non-HTML' do