content: /*
   * Copyright 1999-2018 Alibaba Group Holding Ltd.
   *
   * Licensed under the Apache License, Version 2.0 (the "License");
   * you may not use this file except in compliance with the License.
   * You may obtain a copy of the License at
   *
   *      http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  
  package com.alibaba.nacos.console.filter;
  
  import org.junit.jupiter.api.Test;
  import org.junit.jupiter.api.extension.ExtendWith;
  import org.mockito.Mock;
  import org.mockito.Mockito;
  import org.mockito.junit.jupiter.MockitoExtension;
  
  import jakarta.servlet.FilterChain;
  import jakarta.servlet.ServletException;
  import jakarta.servlet.http.HttpServletRequest;
  import jakarta.servlet.http.HttpServletResponse;
  import java.io.IOException;
  
  @ExtendWith(MockitoExtension.class)
  class XssFilterTest {
      
      private static final String CONTENT_SECURITY_POLICY_HEADER = "Content-Security-Policy";
      
      private static final String CONTENT_SECURITY_POLICY = "script-src 'self'";
      
      @Mock
      private HttpServletRequest request;
      
      @Mock
      private HttpServletResponse response;
      
      @Mock
      private FilterChain filterChain;
      
      @Test
      void testSetResponseHeader() throws ServletException, IOException {
          XssFilter xssFilter = new XssFilter();
          xssFilter.doFilterInternal(request, response, filterChain);
          Mockito.verify(response).setHeader(CONTENT_SECURITY_POLICY_HEADER, CONTENT_SECURITY_POLICY);
      }
      
  }
  