<?php

namespace Tests\Feature;

use Tests\TestCase;

class ContentSecurityPolicyTest extends TestCase
{
    public function test_guest_routes_include_worker_src_for_blob(): void
    {
        config(['app.debug' => false]);

        $response = $this->get('/e/test/upload');

        $csp = $response->headers->get('Content-Security-Policy');

        $this->assertNotNull($csp);
        $this->assertStringContainsString("worker-src 'self' blob:", $csp);
    }
}