Add helmet integration test for body-limit responses

Author: gaby

app_integration_test.go

@@ -11,6 +11,7 @@ import (
 
 	"github.com/gofiber/fiber/v3"
 	"github.com/gofiber/fiber/v3/middleware/cors"
+	"github.com/gofiber/fiber/v3/middleware/helmet"
 	"github.com/valyala/fasthttp"
 	"github.com/valyala/fasthttp/fasthttputil"
 )
@@ -103,6 +104,22 @@ func Test_Integration_App_ServerErrorHandler_PreservesCORSHeadersOnBodyLimit(t *
 	require.Equal(t, "Origin", string(resp.Header.Peek(fiber.HeaderVary)))
 }
 
+func Test_Integration_App_ServerErrorHandler_PreservesHelmetHeadersOnBodyLimit(t *testing.T) {
+	app := fiber.New(fiber.Config{BodyLimit: 16})
+	app.Use(helmet.New())
+	app.Post("/", func(c fiber.Ctx) error {
+		return c.SendStatus(fiber.StatusOK)
+	})
+
+	resp := performOversizedRequest(t, app, nil)
+
+	require.Equal(t, fiber.StatusRequestEntityTooLarge, resp.StatusCode())
+	require.Equal(t, "nosniff", string(resp.Header.Peek(fiber.HeaderXContentTypeOptions)))
+	require.Equal(t, "same-origin", string(resp.Header.Peek("Cross-Origin-Opener-Policy")))
+	require.Equal(t, "same-origin", string(resp.Header.Peek("Cross-Origin-Resource-Policy")))
+	require.Equal(t, "require-corp", string(resp.Header.Peek("Cross-Origin-Embedder-Policy")))
+}
+
 func Test_Integration_App_ServerErrorHandler_RetainsHeadersFromSubsequentMiddleware(t *testing.T) {
 	app := fiber.New(fiber.Config{BodyLimit: 8})
 	app.Use(func(c fiber.Ctx) error {