INNER CODE UNIT · Python
security_headers_pass
yaojingang/GEOFlow · scripts/audit-admin-ui-v3-navigation.py:57
def security_headers_pass(headers: dict[str, str]) -> bool:
return (
headers.get("x-content-type-options", "").lower() == "nosniff"
and headers.get("x-frame-options", "").lower() == "sameorigin"
and headers.get("referrer-policy", "").lower() == "strict-origin-when-cross-origin"
)
def reviewed_headers(headers: dict[str, str]) -> dict[str, str]:
return {name: headers[name] for name in REVIEWED_RESPONSE_HEADERS if name in headers}
def frame_result(page, expected_state: str, expected_sidebar: float, expected_body_x: float) -> dict:
try:
page.wait_for_function("() => window.__gfFrames?.length >= 40", timeout=5000)
except PlaywrightTimeoutError:
pass