officejs_test: update tests

bt5/officejs_test/TestTemplateItem/portal_components/test.erp5.testOfficeJSScenario.py

@@ -126,7 +126,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
 
     page_content = response.read()
     self.assertTrue(
-      'document.location.replace("development/" + document.location.hash)' in page_content,
+      '<script data-appconfig="latest_version" type="text/x-renderjs-configuration">development</script>' in page_content,
       page_content
     )
     self.assertTrue(
@@ -144,7 +144,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
     )
     self.assertEquals(
       response.getheader('Content-Security-Policy'),
-      "default-src 'self'; script-src 'unsafe-inline';"
+      "default-src 'self';"
     )
     self.assertEquals(
       response.getheader('X-Frame-Options'),
@@ -248,7 +248,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
 
     page_content = response.read()
     self.assertTrue(
-      'document.location.replace("development/" + document.location.hash)' in page_content,
+      '<script data-appconfig="latest_version" type="text/x-renderjs-configuration">development</script>' in page_content,
       page_content
     )
     self.assertTrue(
@@ -266,7 +266,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
     )
     self.assertEquals(
       response.getheader('Content-Security-Policy'),
-      "default-src 'self'; script-src 'unsafe-inline';"
+      "default-src 'self';"
     )
     self.assertEquals(
       response.getheader('X-Frame-Options'),
@@ -296,7 +296,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
 
     page_content = response.read()
     self.assertTrue(
-      'document.location.replace("%s/" + document.location.hash)' % web_section.getId() in page_content,
+      '<script data-appconfig="latest_version" type="text/x-renderjs-configuration">%s</script>' % web_section.getId() in page_content,
       page_content
     )
     self.assertTrue(
@@ -314,7 +314,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
     )
     self.assertEquals(
       response.getheader('Content-Security-Policy'),
-      "default-src 'self'; script-src 'unsafe-inline';"
+      "default-src 'self';"
     )
     self.assertEquals(
       response.getheader('X-Frame-Options'),

bt5/officejs_test/TestTemplateItem/portal_components/test.erp5.testOfficeJSScenarioRjsUI.py

@@ -120,7 +120,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
 
     page_content = response.read()
     self.assertTrue(
-      'document.location.replace("development/" + document.location.hash)' in page_content,
+      '<script data-appconfig="latest_version" type="text/x-renderjs-configuration">development</script>' in page_content,
       page_content
     )
     self.assertTrue(
@@ -138,7 +138,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
     )
     self.assertEquals(
       response.getheader('Content-Security-Policy'),
-      "default-src 'self'; script-src 'unsafe-inline';"
+      "default-src 'self';"
     )
     self.assertEquals(
       response.getheader('X-Frame-Options'),
@@ -242,7 +242,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
 
     page_content = response.read()
     self.assertTrue(
-      'document.location.replace("development/" + document.location.hash)' in page_content,
+      '<script data-appconfig="latest_version" type="text/x-renderjs-configuration">development</script>' in page_content,
       page_content
     )
     self.assertTrue(
@@ -260,7 +260,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
     )
     self.assertEquals(
       response.getheader('Content-Security-Policy'),
-      "default-src 'self'; script-src 'unsafe-inline';"
+      "default-src 'self';"
     )
     self.assertEquals(
       response.getheader('X-Frame-Options'),
@@ -290,7 +290,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
 
     page_content = response.read()
     self.assertTrue(
-      'document.location.replace("%s/" + document.location.hash)' % web_section.getId() in page_content,
+      '<script data-appconfig="latest_version" type="text/x-renderjs-configuration">%s</script>' % web_section.getId() in page_content,
       page_content
     )
     self.assertTrue(
@@ -308,7 +308,7 @@ class TestOfficeJSScenario(testOfficeJSAppstoreMixin):
     )
     self.assertEquals(
       response.getheader('Content-Security-Policy'),
-      "default-src 'self'; script-src 'unsafe-inline';"
+      "default-src 'self';"
     )
     self.assertEquals(
       response.getheader('X-Frame-Options'),