From 0ea3fcec397b69815975647f5e2aa5fe944a8486 Mon Sep 17 00:00:00 2001 From: GitLab Bot Date: Mon, 20 Jun 2022 11:10:13 +0000 Subject: Add latest changes from gitlab-org/gitlab@15-1-stable-ee --- spec/lib/gitlab/content_security_policy/config_loader_spec.rb | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'spec/lib/gitlab/content_security_policy') diff --git a/spec/lib/gitlab/content_security_policy/config_loader_spec.rb b/spec/lib/gitlab/content_security_policy/config_loader_spec.rb index 2df85434f0e..109e83be294 100644 --- a/spec/lib/gitlab/content_security_policy/config_loader_spec.rb +++ b/spec/lib/gitlab/content_security_policy/config_loader_spec.rb @@ -178,6 +178,16 @@ RSpec.describe Gitlab::ContentSecurityPolicy::ConfigLoader do expect(directives['connect_src']).not_to include(snowplow_micro_url) end end + + context 'when REVIEW_APPS_ENABLED is set' do + before do + stub_env('REVIEW_APPS_ENABLED', 'true') + end + + it 'adds gitlab-org/gitlab merge requests API endpoint to CSP' do + expect(directives['connect_src']).to include('https://gitlab.com/api/v4/projects/278964/merge_requests/') + end + end end end end -- cgit v1.2.1