fix(security): harden public CV edges

2026-08-15 20:53:16 +02:00
parent 74a1e0d845
commit 8ef8b098c8
13 changed files with 54 additions and 6 deletions
@@ -224,5 +224,6 @@ test('preview failure is visible and retryable without leaving the editor', asyn
  expect(await screen.findByText('Preview unavailable')).toBeInTheDocument();
  fireEvent.click(screen.getByRole('button', { name: 'Retry preview' }));
  await waitFor(() => expect(screen.getByTitle('CV preview')).toHaveAttribute('srcdoc', '<p>retry</p>'));
+  expect(screen.getByTitle('CV preview')).toHaveAttribute('sandbox', 'allow-same-origin');
  await waitFor(() => expect(screen.queryByText('Preview unavailable')).not.toBeInTheDocument());
 });