midas/ssh-jumphost
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

umbau 1.0

Browse Source
This commit is contained in:
Midas Wollinger
2026-09-02 20:30:44 +02:00
parent afe6719f51
commit 5c95b21be7
77 changed files with 10733 additions and 1914 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
tests/test_csp_compliance.py
View File

@ -67,7 +67,7 @@ def _assert_no_inline_script(html: str, page: str) -> None:
@pytest.mark.asyncio
@pytest.mark.parametrize(
"path",
["/", "/dashboard", "/terminal/1", "/rdp/1", "/admin"],
["/", "/dashboard", "/terminal/1", "/rdp/1", "/admin", "/workspace"],
)
async def test_rendered_pages_contain_no_inline_style_or_script(client, path):
resp = await client.get(path)
@ -132,7 +132,9 @@ async def test_login_page_hidden_sections_use_css_class_not_inline_style(client)
@pytest.mark.parametrize("path,expected_host_id", [("/terminal/42", "42"), ("/rdp/7", "7")])
async def test_session_pages_expose_host_id_via_data_attribute(client, path, expected_host_id):
"""host_id muss CSP-konform (kein Inline-<script>) an das Frontend-JS
uebergeben werden -- ueber data-host-id auf #session-shell."""
uebergeben werden -- ueber data-host-id auf #session-container (F1,
Umsetzungsauftrag_Sonnet5.md Teil F.3.1: static/js/terminal.js bzw. rdp.js
lesen es von dort und bauen #session-shell danach selbst dynamisch)."""
resp = await client.get(path)
assert resp.status_code == 200, resp.text
assert f'data-host-id="{expected_host_id}"' in resp.text