Add CSP to SVG error responses

1 files changed, 11 insertions, 2 deletions

diff --git a/tests/app/Factories/ImageFactoryTest.php b/tests/app/Factories/ImageFactoryTest.php
index b14f9ee8d3..3f77d78c1c 100644
--- a/tests/app/Factories/ImageFactoryTest.php
+++ b/tests/app/Factories/ImageFactoryTest.php
@@ -19,14 +19,23 @@ declare(strict_types=1);
 
 namespace Fisharebest\Webtrees\Factories;
 
+use Fisharebest\Webtrees\Services\PhpService;
 use Fisharebest\Webtrees\TestCase;
 use PHPUnit\Framework\Attributes\CoversClass;
 
 #[CoversClass(ImageFactory::class)]
 class ImageFactoryTest extends TestCase
 {
-    public function testClass(): void
+    public function testReplacementImageResponseSetsContentSecurityPolicyHeader(): void
     {
-        self::assertTrue(class_exists(ImageFactory::class));
+        $php_service   = $this->createStub(PhpService::class);
+        $image_factory = new ImageFactory($php_service);
+        $response      = $image_factory->replacementImageResponse('404');
+
+        self::assertSame('image/svg+xml', $response->getHeaderLine('content-type'));
+        self::assertSame(
+            'default-src none',
+            $response->getHeaderLine('content-security-policy'),
+        );
     }
 }