first commit

tests/Feature/Security/SecurityHeadersTest.php

@@ -0,0 +1,13 @@
+<?php
+
+use function Pest\Laravel\get;
+
+it('устанавливает заголовки безопасности (ЗИС)', function () {
+    $response = get('/');
+
+    $response->assertHeader('X-Frame-Options', 'DENY')
+        ->assertHeader('X-Content-Type-Options', 'nosniff')
+        ->assertHeader('Referrer-Policy', 'strict-origin-when-cross-origin');
+
+    expect($response->headers->get('Content-Security-Policy'))->toContain("default-src 'self'");
+});