CSP 차단 출처 분류 보강

tests/csp-report.test.js

@@ -32,6 +32,11 @@ test('CSP 보고 정규화는 실행 토큰과 브라우저 계열만 보존한
   assert.equal(normalizeCspDocumentPath('/settings?email=user@example.com'), '/settings')
   assert.equal(normalizeCspBlockedOrigin('inline'), 'inline')
   assert.equal(normalizeCspBlockedOrigin('data:text/javascript,secret'), 'data:')
+  assert.equal(normalizeCspBlockedOrigin(''), 'empty')
+  assert.equal(normalizeCspBlockedOrigin('about:blank'), 'about:')
+  assert.equal(normalizeCspBlockedOrigin('chrome-extension://abcdef/private.html'), 'chrome-extension:')
+  assert.equal(normalizeCspBlockedOrigin('moz-extension://abcdef/private.html'), 'moz-extension:')
+  assert.equal(normalizeCspBlockedOrigin('safari-web-extension://abcdef/private.html'), 'safari-web-extension:')
   assert.equal(classifyCspUserAgentFamily('Mozilla/5.0 Version/18.0 Safari/605.1.15'), 'Safari')
 })