2.3.14 release (#437)

- update to wabac.js 2.23.4 to make hashing optional, not require wasm
- add tests with CSP policy in place

tests/embed/test-serve.json

@@ -0,0 +1,10 @@
+{
+  "cleanUrls": false,
+  "headers": [{
+    "source": "*",
+    "headers": [{
+      "key": "Content-Security-Policy",
+      "value": "default-src 'self' 'unsafe-inline' data: blob:"
+    }]
+  }]
+}

tests/embeds.spec.js

@@ -1,6 +1,12 @@
 import { test, expect } from "@playwright/test";
 
 test("same-domain embed is loading", async ({ page }) => {
+  page.on("response", async (response) => {
+    if (response.url() === "http://localhost:9990/embed.html") {
+      expect(await response.headerValue("Content-Security-Policy")).toBe("default-src 'self' 'unsafe-inline' data: blob:");
+    }
+  });
+
   await page.goto("http://localhost:9990/embed.html");
 
   const res = page
@@ -15,7 +21,7 @@ test("same-domain embed is loading", async ({ page }) => {
 });
 
 test("docs page embed is loading", async ({ page }) => {
-  await page.goto("http://localhost:9990/docs/embedding/");
+  await page.goto("http://localhost:9990/docs/embedding/index.html");
 
   const res = page
     .locator("replay-web-page")