Remove no-js declaration in nonce-enabled inline script
Change-Id: If29e7d48ef9c326533a5e6f9a44176d2da84b78d
diff --git a/t/page.t b/t/page.t
index 55f6518..4339f4e 100644
--- a/t/page.t
+++ b/t/page.t
@@ -23,10 +23,14 @@
->attr_is('meta[property="og:url"]', 'content', '//korap2.ids-mannheim.de/')
;
+# Test csp
$t->get_ok('/')
->header_like('Content-Security-Policy', qr!default-src 'self';!)
->header_like('Content-Security-Policy', qr!media-src 'none';!)
->header_like('Content-Security-Policy', qr!object-src 'self';!)
+ ->header_like('Content-Security-Policy', qr!nonce-!)
+ ->content_like(qr/<script nonce/)
+ ->content_like(qr/document\.body\.classList\.remove\(\'no-js\'\);/)
;
# Test additions