From: Felix Dörre <felix@dogcraft.de>
Date: Thu, 3 Jul 2014 22:10:50 +0000 (+0200)
Subject: Adding very basic tests for Security headers
X-Git-Url: https://code.wpia.club/?p=gigi.git;a=commitdiff_plain;h=d6aa4dd32a3135e877224b0f75a3838852a714ad;hp=5587d66ad8b14e851e07eb4ff214e2dc49c7c57e

Adding very basic tests for Security headers
---

diff --git a/tests/org/cacert/gigi/TestSecurityHeaders.java b/tests/org/cacert/gigi/TestSecurityHeaders.java
new file mode 100644
index 00000000..9df4e22c
--- /dev/null
+++ b/tests/org/cacert/gigi/TestSecurityHeaders.java
@@ -0,0 +1,31 @@
+package org.cacert.gigi;
+
+import java.io.IOException;
+import java.net.HttpURLConnection;
+import java.net.URL;
+
+import org.cacert.gigi.testUtils.ManagedTest;
+import org.junit.Test;
+
+import static org.junit.Assert.*;
+
+public class TestSecurityHeaders extends ManagedTest {
+	@Test
+	public void testSTS() throws IOException {
+		HttpURLConnection uc = (HttpURLConnection) new URL("https://"
+				+ getServerName()).openConnection();
+		assertNotNull(uc.getHeaderField("Strict-Transport-Security"));
+	}
+
+	public void testCSP() throws IOException {
+		HttpURLConnection uc = (HttpURLConnection) new URL("https://"
+				+ getServerName()).openConnection();
+		assertNotNull(uc.getHeaderField("Content-Security-Policy"));
+	}
+	public void testAllowOrigin() throws IOException {
+		HttpURLConnection uc = (HttpURLConnection) new URL("https://"
+				+ getServerName()).openConnection();
+		assertNotNull(uc.getHeaderField("Access-Control-Allow-Origin"));
+
+	}
+}