Pass CI pipeline

Author: lmuntaner

src/frontend/tests/e2e-playwright/authorize/migration.spec.ts

@@ -15,6 +15,11 @@ import { isNullish } from "@dfinity/utils";
 const TEST_USER_NAME = "Test User";
 
 test.describe("Migration from an app", () => {
+  test.skip(
+    ({ browserName }) => browserName === "webkit",
+    "Migration test not supported on Safari because it uses virtual authenticators which are not supported.",
+  );
+
   test("User can migrate a legacy identity", async ({ page }) => {
     const auth = dummyAuth();
     let credential: Protocol.WebAuthn.Credential | undefined;

src/frontend/tests/e2e-playwright/dashboard/migration.spec.ts

@@ -39,6 +39,11 @@ const upgradeLegacyIdentity = async (
 };
 
 test.describe("Migration", () => {
+  test.skip(
+    ({ browserName }) => browserName === "webkit",
+    "Migration test not supported on Safari because it uses virtual authenticators which are not supported.",
+  );
+
   test("User can migrate a legacy identity", async ({ page }) => {
     // Step 1: Create a legacy identity
     await page.goto(LEGACY_II_URL);

src/frontend/tests/e2e-playwright/fixtures.ts

@@ -36,7 +36,7 @@ export const test = base.extend({
         }
 
         const canister_name = hostToCanisterName[url.hostname];
-        if (!canister_name) {
+        if (canister_name === undefined) {
           return route.continue();
         }
         // The vite server uses the Host header and the localhost subdomain to determine where the redirect the request.

src/internet_identity/src/http.rs

@@ -126,10 +126,10 @@ pub fn security_headers(
         // Content-Security-Policy (CSP)
         // Comprehensive policy to prevent XSS attacks and data injection
         // See content_security_policy_header() function for detailed explanation
-        // (
-        //     "Content-Security-Policy".to_string(),
-        //     content_security_policy_header(integrity_hashes, maybe_related_origins),
-        // ),
+        (
+            "Content-Security-Policy".to_string(),
+            content_security_policy_header(integrity_hashes, maybe_related_origins),
+        ),
         // Strict-Transport-Security (HSTS)
         // Forces browsers to use HTTPS for all future requests to this domain
         // max-age=31536000: Valid for 1 year (31,536,000 seconds)