0 Fork 0

mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-10 12:47:04 +00:00

Files

T

kevinveenbirkenbachandClaude Opus 5 596b10c403 test(lint/csp): demand reason for unsafe-* grants

unsafe-inline re-admits the inline execution an XSS needs and unsafe-eval re-admits string-to-code, so a CSP relaxation must be verified against the running app rather than copied from another role. The new lint requires a nocheck marker plus a Reason on the flag's own line, so a marker cannot drift to the neighbouring directive.

The 197 pre-existing grants across 70 roles are checked out with a TODO: they were never verified and still have to be.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-18 23:28:14 +02:00

external.md

refactor(ci): prefix workflows by trigger

2026-08-07 17:05:51 +02:00

integration.md

feat(env): SPOT env-pipeline + INFINITO_* namespace

2026-05-20 20:40:34 +02:00

lint.md

feat(env): SPOT env-pipeline + INFINITO_* namespace

2026-05-20 20:40:34 +02:00

playwright.md

Merge branch 'main' into feature/swarm-nfs

2026-06-27 17:13:55 +02:00

README.md

…

regression.md

…

suppression.md

test(lint/csp): demand reason for unsafe-* grants

2026-08-18 23:28:14 +02:00

unit.md

feat(env): SPOT env-pipeline + INFINITO_* namespace

2026-05-20 20:40:34 +02:00

README.md

Test guidance 🧪

This directory contains contributor guidance for automated tests. Its scope is how lint, unit, integration, regression, and Playwright coverage should be structured, selected, and validated.