claude code agent 227 267bafdd73 test(html-embed): cover sandbox resize/security helpers (#98, #99) ...

Extract clampHeight + isTrustedHeightMessage + the HTML_EMBED_SANDBOX token
constant from the NodeView and test them: clamp bounds; reject a resize message
from a foreign window / wrong type / NaN/Infinity; accept a valid same-source
finite message; assert the sandbox is exactly 'allow-scripts allow-popups
allow-forms' (no allow-same-origin) and rendered via srcDoc (not src).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-21 05:52:15 +03:00

..

client

test(html-embed): cover sandbox resize/security helpers (#98, #99)

2026-06-21 05:52:15 +03:00

server

test(workspace): cover trackerHead DTO validation, CASL gate, no-op audit (#98)

2026-06-21 05:52:15 +03:00