fix(ui): make mega menus work under strict CSP

2026-08-24 21:52:25 +05:30
parent 9067e68f69
commit 0618782355
12 changed files with 99 additions and 19 deletions
@@ -62,6 +62,13 @@ test("split runtime hydrates a controller only from the controller asset", () =>
  expect(win.document.activeElement).toBe(buttons[1]);
 });

+test("production hydration uses Trusted Types for HTML and controller URLs", () => {
+  const runtime = getReactiveRuntime();
+  expect(runtime).toContain('createPolicy("wrnexus"');
+  expect(runtime).toContain('template.innerHTML = trustedHTML(markup || "")');
+  expect(runtime).toContain("script.src = trustedScriptURL(componentControllerUrl)");
+});
+
 test("a page without controller markers does not request the controller asset", () => {
  const win = mount(
    `<main data-scope="count: 1"><span>{count}</span></main>`,