Jennie Robinson Faber
29c96a207e
Set up Vitest with server (node) and client (jsdom) test projects. 79 tests across 8 files verify all Phase 0-1 security controls: escapeHtml sanitization, DOMPurify markdown XSS prevention, CSRF enforcement, security headers, rate limiting, auth guards, profile field allowlist, and login anti-enumeration. Updated SECURITY_EVALUATION.md with remediation status, implementation summary, and automated test coverage details.
25 lines
514 B
JavaScript
25 lines
514 B
JavaScript
import { defineConfig } from 'vitest/config'
|
|
|
|
export default defineConfig({
|
|
test: {
|
|
projects: [
|
|
{
|
|
test: {
|
|
name: 'server',
|
|
include: ['tests/server/**/*.test.js'],
|
|
environment: 'node',
|
|
globals: true,
|
|
setupFiles: ['./tests/server/setup.js']
|
|
}
|
|
},
|
|
{
|
|
test: {
|
|
name: 'client',
|
|
include: ['tests/client/**/*.test.js'],
|
|
environment: 'jsdom',
|
|
globals: true
|
|
}
|
|
}
|
|
]
|
|
}
|
|
})
|