diff --git a/app/docs.test.ts b/app/docs.test.ts index df1ccf11..38635c27 100644 --- a/app/docs.test.ts +++ b/app/docs.test.ts @@ -128,6 +128,10 @@ test("site includes core guides and production configuration", () => { expect(readFileSync(join(root, "wrnexus.config.ts"), "utf8")).toContain( "WRNexusJS Documentation", ); + const config = readFileSync(join(root, "wrnexus.config.ts"), "utf8"); + expect(config).toContain("contentSecurityPolicy:"); + expect(config).not.toMatch(/^\s*csp:\s*\{/m); + expect(config).toContain('"connect-src": ["\'self\'", "https://fonts.gstatic.com"]'); }); test("language reference covers directives, events, loops, and conditionals", () => { diff --git a/wrnexus.config.ts b/wrnexus.config.ts index 67948027..6717d3b7 100644 --- a/wrnexus.config.ts +++ b/wrnexus.config.ts @@ -35,7 +35,7 @@ const config: AppConfig = { referrerPolicy: "strict-origin-when-cross-origin", permissionsPolicy: "camera=(), microphone=(), geolocation=()", }, - csp: { + contentSecurityPolicy: { enabled: true, directives: { "default-src": ["'self'"],