smoke: assert X-Frame-Options on home (asim parity)

4be3a233017596525bd84eb2a6b34d6316a607e6 · 2026-05-13 10:35:38 -0700 · Steve Abrams

Files touched

M test/smoke.js

Diff

commit 4be3a233017596525bd84eb2a6b34d6316a607e6
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Wed May 13 10:35:38 2026 -0700

    smoke: assert X-Frame-Options on home (asim parity)
---
 test/smoke.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/test/smoke.js b/test/smoke.js
index 20fe913..99c199d 100644
--- a/test/smoke.js
+++ b/test/smoke.js
@@ -49,6 +49,7 @@ function check(name, cond, hint = '') {
   check('home: footer Privacy',/\/privacy/.test(r.body));
   check('home: footer Terms',  /\/terms/.test(r.body));
   check('home: X-Content-Type-Options', (r.headers['x-content-type-options'] || '') === 'nosniff');
+  check('home: X-Frame-Options',        /SAMEORIGIN|DENY/.test(r.headers['x-frame-options'] || ''));
   check('home: Referrer-Policy',        /strict-origin/.test(r.headers['referrer-policy'] || ''));
   check('home: Strict-Transport-Security', /max-age=/.test(r.headers['strict-transport-security'] || ''));
   check('home: CSP',                    /default-src/.test(r.headers['content-security-policy'] || ''));

← 338bd3e smoke: assert HSTS + CSP headers (helmet regression guard) · back to Stars of Design · smoke: 3 more home assertions — Permissions-Policy, canonica 73e8ba0 →