Loosen for workers

ni · Mar 3, 2024 · 429e81a · 429e81a
1 parent 5130e6c
commit 429e81a
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 8 deletions.
diff --git a/angular-workspace/projects/example-client-app/karma.conf.js b/angular-workspace/projects/example-client-app/karma.conf.js
@@ -46,11 +46,13 @@ module.exports = function (config) {
     customHeaders: [
       // Add a Content-Security-Policy header for the tests
       // Following: https://developer.chrome.com/docs/extensions/reference/manifest/content-security-policy
-      // Need 'unsafe-inline' to support karma behavior: https://github.com/karma-runner/karma/issues/3260
+      // Need script-src 'unsafe-inline' to support karma behavior
+      // See https://github.com/karma-runner/karma/issues/3260
+      // Need worker-src blob: to support current worker loading pattern
       {
           match: '\\.html',
           name: 'Content-Security-Policy',
-          value: "script-src 'self' 'unsafe-inline'; object-src 'self';"
+          value: "script-src 'self' 'unsafe-inline'; object-src 'self'; worker-src 'self' blob: ;"
       }
   ]
   });

diff --git a/angular-workspace/projects/ni/nimble-angular/karma.conf.js b/angular-workspace/projects/ni/nimble-angular/karma.conf.js
@@ -52,11 +52,13 @@ module.exports = config => {
         customHeaders: [
             // Add a Content-Security-Policy header for the tests
             // Following: https://developer.chrome.com/docs/extensions/reference/manifest/content-security-policy
-            // Need 'unsafe-inline' to support karma behavior: https://github.com/karma-runner/karma/issues/3260
+            // Need script-src 'unsafe-inline' to support karma behavior
+            // See https://github.com/karma-runner/karma/issues/3260
+            // Need worker-src blob: to support current worker loading pattern
             {
                 match: '\\.html',
                 name: 'Content-Security-Policy',
-                value: "script-src 'self' 'unsafe-inline'; object-src 'self';"
+                value: "script-src 'self' 'unsafe-inline'; object-src 'self'; worker-src 'self' blob: ;"
             }
         ]
     });

diff --git a/packages/jasmine-parameterized/karma.conf.cjs b/packages/jasmine-parameterized/karma.conf.cjs
@@ -62,11 +62,13 @@ module.exports = config => {
         customHeaders: [
             // Add a Content-Security-Policy header for the tests
             // Following: https://developer.chrome.com/docs/extensions/reference/manifest/content-security-policy
-            // Need 'unsafe-inline' to support karma behavior: https://github.com/karma-runner/karma/issues/3260
+            // Need script-src 'unsafe-inline' to support karma behavior
+            // See https://github.com/karma-runner/karma/issues/3260
+            // Need worker-src blob: to support current worker loading pattern
             {
                 match: '\\.html',
                 name: 'Content-Security-Policy',
-                value: "script-src 'self' 'unsafe-inline'; object-src 'self';"
+                value: "script-src 'self' 'unsafe-inline'; object-src 'self'; worker-src 'self' blob: ;"
             }
         ]
     };

diff --git a/packages/nimble-components/karma.conf.js b/packages/nimble-components/karma.conf.js
@@ -151,11 +151,13 @@ module.exports = config => {
         customHeaders: [
             // Add a Content-Security-Policy header for the tests
             // Following: https://developer.chrome.com/docs/extensions/reference/manifest/content-security-policy
-            // Need 'unsafe-inline' to support karma behavior: https://github.com/karma-runner/karma/issues/3260
+            // Need script-src 'unsafe-inline' to support karma behavior
+            // See https://github.com/karma-runner/karma/issues/3260
+            // Need worker-src blob: to support current worker loading pattern
             {
                 match: '\\.html',
                 name: 'Content-Security-Policy',
-                value: "script-src 'self' 'unsafe-inline'; object-src 'self';"
+                value: "script-src 'self' 'unsafe-inline'; object-src 'self'; worker-src 'self' blob: ;"
             }
         ]
     };