Vercel Page Integrity fixture
Checkout — SPA soft-navigation repro
Page Integrity should be configured for /checkout only. This
page fires a connect-src probe on load (reported under
/checkout), then performs a client-side
history.pushState to /order-confirmation and
fires a second probe. Because CSP is bound to the still-live
/checkout document, that second probe is reported with
document-uri: /order-confirmation — so the inventory shows
seenOnPages for a path that was never configured.
Current document path:
/checkout
(auto-advances in 3s; add ?auto=off to drive it manually)