Checkpoint web parity through Chromium input tasks

tools/web/check-deployment-contract.mjs

@@ -23,6 +23,7 @@ assert.deepEqual(contract.responseHeaders.allResponses, {
   "Cross-Origin-Opener-Policy": "same-origin",
   "Cross-Origin-Embedder-Policy": "require-corp",
   "Cross-Origin-Resource-Policy": "same-origin",
+  "Content-Security-Policy": "default-src 'self'; script-src 'self' 'wasm-unsafe-eval'; worker-src 'self'; connect-src 'self'; font-src 'self'; img-src 'self'; media-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'",
 });
 const routes = Object.fromEntries(contract.responseHeaders.routes.map((route) => [route.id, route]));
 assert.deepEqual(routes["entry-document"], { id: "entry-document", patterns: ["/", "/index.html"], cacheControl: "no-cache" });
@@ -38,7 +39,18 @@ for (const [extension, mime] of Object.entries({
   ".wasm": "application/wasm",
   ".json": "application/json; charset=utf-8",
   ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".webp": "image/webp",
+  ".ttf": "font/ttf",
+  ".otf": "font/otf",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
   ".wav": "audio/wav",
+  ".mp3": "audio/mpeg",
+  ".ogg": "audio/ogg",
+  ".mp4": "video/mp4",
+  ".webm": "video/webm",
   ".blend": "application/octet-stream",
   ".nvdb": "application/x-nanovdb",
 })) assert.equal(contract.mimeTypes[extension], mime, `${extension} MIME drifted`);