Danijel Martinek
a540f3afb1
Register core-shared/security/tanstack server middleware in app.config.ts as a Nitro/H3 hook that emits the six security headers and forwards the per-request nonce. Update instrumentation-client to read the nonce from <meta name="csp-nonce"> and pass it to initSentryClientReact. Add nonce support to initSentryClientReact (feedbackIntegration receives styleNonce/scriptNonce), mirroring the initSentryClient pattern already in place for web-next. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
51 lines
1.5 KiB
TypeScript
51 lines
1.5 KiB
TypeScript
// apps/web-tanstack/src/instrumentation-client.test.ts
|
|
import { describe, it, expect, vi, beforeEach } from "vitest";
|
|
|
|
// Hoist the mock so it's active when instrumentation-client runs its
|
|
// top-level initSentryClientReact call on import.
|
|
const initSentryClientReactMock = vi.hoisted(() => vi.fn());
|
|
|
|
vi.mock("@repo/core-shared/instrumentation/sentry/init-client-react", () => ({
|
|
initSentryClientReact: initSentryClientReactMock,
|
|
}));
|
|
|
|
describe("instrumentation-client", () => {
|
|
beforeEach(() => {
|
|
vi.clearAllMocks();
|
|
vi.resetModules();
|
|
});
|
|
|
|
it("passes nonce from csp-nonce meta tag to initSentryClientReact", async () => {
|
|
const meta = document.createElement("meta");
|
|
meta.setAttribute("name", "csp-nonce");
|
|
meta.setAttribute("content", "test-nonce-xyz");
|
|
document.head.appendChild(meta);
|
|
|
|
try {
|
|
await import("./instrumentation-client");
|
|
} finally {
|
|
document.head.removeChild(meta);
|
|
}
|
|
|
|
expect(initSentryClientReactMock).toHaveBeenCalledWith(
|
|
expect.objectContaining({ nonce: "test-nonce-xyz" }),
|
|
);
|
|
});
|
|
|
|
it("passes empty string nonce when no csp-nonce meta tag is present", async () => {
|
|
await import("./instrumentation-client");
|
|
|
|
expect(initSentryClientReactMock).toHaveBeenCalledWith(
|
|
expect.objectContaining({ nonce: "" }),
|
|
);
|
|
});
|
|
|
|
it("passes web-tanstack as the app tag", async () => {
|
|
await import("./instrumentation-client");
|
|
|
|
expect(initSentryClientReactMock).toHaveBeenCalledWith(
|
|
expect.objectContaining({ app: "web-tanstack" }),
|
|
);
|
|
});
|
|
});
|