"""Tests for KaTeX font CSP handling.

KaTeX is vendored locally, so the CSP should not need to loosen font-src for a
third-party CDN.
"""
import pathlib

REPO = pathlib.Path(__file__).parent.parent
HELPERS_PY = (REPO / "api" / "helpers.py").read_text(encoding="utf-8")
INDEX_HTML = (REPO / "static" / "index.html").read_text(encoding="utf-8")
UI_JS = (REPO / "static" / "ui.js").read_text(encoding="utf-8")


def _font_src() -> str:
    return HELPERS_PY.split("font-src", 1)[1].split(";", 1)[0]


def test_font_src_keeps_self_and_data_without_cdn_font_exception():
    """font-src should stay tight now that KaTeX fonts are local."""
    font_src = _font_src()
    assert "'self'" in font_src
    assert "data:" in font_src
    assert "https://cdn.jsdelivr.net" not in font_src


def test_katex_assets_are_loaded_from_static_vendor_paths():
    assert "static/vendor/katex/0.16.22/katex.min.css" in INDEX_HTML
    assert "static/vendor/katex/0.16.22/katex.min.js" in UI_JS
    assert "https://cdn.jsdelivr.net/npm/katex@0.16.22" not in INDEX_HTML
    assert "https://cdn.jsdelivr.net/npm/katex@0.16.22" not in UI_JS