wp-cli-secure-command/tests/Feature/Nginx/AddSecurityHeadersTest.php

<?php

namespace Tests\Feature;

use Tests\BaseTestCase;
use WP_CLI_Secure\SubCommands\AddSecurityHeaders;

class AddSecurityHeadersTest extends BaseTestCase {
    public function setUp(): void {
        parent::setUp();

        $command = new AddSecurityHeaders($this->nginxAssocArgs);
        $command->output();

        $command = new AddSecurityHeaders($this->apacheAssocArgs);
        $command->output();

        exec('cd ' . dirname(dirname(__DIR__)) . DIRECTORY_SEPARATOR . $_ENV['WORDPRESS_NGINX_PATH'] . '&& ddev exec nginx -s reload');
    }

    public function testItWillContainAllHeadersOnNginx() : void {
        $response = $this->nginxHttpClient->get('', ['http_errors' => false]);

        $this->assertNotEmpty($response->getHeaderLine( 'Strict-Transport-Security' ));
        $this->assertNotEmpty($response->getHeaderLine( 'Referrer-Policy' ));
        $this->assertNotEmpty($response->getHeaderLine( 'x-content-type-options' ));
        $this->assertNotEmpty($response->getHeaderLine( 'X-Frame-Options' ));
    }

    public function testItWillContainAllHeadersOnApache() : void {
        $response = $this->apacheHttpClient->get('', ['http_errors' => false]);

        $this->assertNotEmpty($response->getHeaderLine( 'Strict-Transport-Security' ));
        $this->assertNotEmpty($response->getHeaderLine( 'Referrer-Policy' ));
        $this->assertNotEmpty($response->getHeaderLine( 'x-content-type-options' ));
        $this->assertNotEmpty($response->getHeaderLine( 'X-Frame-Options' ));
    }
}