In Console 4.18 we introduced an initial Content Security Policy (CSP) implementation (CONSOLE-4263).

This affects both Console web application as well as any dynamic plugins loaded by Console. In production, CSP violations are sent to telemetry service for analysis (CONSOLE-4272).

We need a reliable way to detect new CSP violations as part of our automated CI checks. We can start with testing the main dashboard page of Console and expand to more pages as necessary.

Acceptance criteria:

• Update the release repo, so the CSP violation test script is executed as part of Console CI checks.