mirror of
https://github.com/apache/superset.git
synced 2026-05-09 01:46:06 +00:00
Replaces racy one-shot checks with auto-retrying assertions, asserts the referrer-block test against the deterministic 403 response (not iframe content), uses an OS-allocated port for the static test app with connection-tracked teardown, caches the JWT access token across tests, sends CSRF on the guest-token call (page.request always carries the storageState cookie, so JWT-only doesn't actually skip CSRF), and waits for a real viz element inside chart containers rather than a class that doesn't exist. Verified with --repeat-each=5 (25/25 passing). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>