"Response contains Content-Security-Policy header with the expected value"
);
is(
$res->content, '<script nonce="' . $test_nonce . '">' . "\n" . '</script>' . "\n",
$res->content, "\n" . ' <script nonce="' . $test_nonce . '">' . "\n" . '</script>' . "\n",
"Response contains generated nonce in the body"
[% USE raw %][% USE Koha %]<script nonce="[% Koha.CSPNonce | $raw %]">
[% USE raw %][% USE Koha %]
<script nonce="[% Koha.CSPNonce | $raw %]">
</script>
-