From 417b537a25de28737ffcd11366054fd90d76c147 Mon Sep 17 00:00:00 2001
From: Igor Rozum <rozumiq@gmail.com>
Date: Thu, 6 Aug 2026 19:21:40 -0400
Subject: [PATCH] Build/Test Tools: Add unit test for
 send_frame_options_header()

---
 .../functions/sendFrameOptionsHeader.php      | 28 +++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 tests/phpunit/tests/functions/sendFrameOptionsHeader.php

diff --git a/tests/phpunit/tests/functions/sendFrameOptionsHeader.php b/tests/phpunit/tests/functions/sendFrameOptionsHeader.php
new file mode 100644
index 0000000000000..2e9d7f1395491
--- /dev/null
+++ b/tests/phpunit/tests/functions/sendFrameOptionsHeader.php
@@ -0,0 +1,28 @@
+<?php
+
+/**
+ * Test send_frame_options_header().
+ *
+ * @runTestsInSeparateProcesses
+ * @preserveGlobalState disabled
+ *
+ * @group functions
+ *
+ * @covers ::send_frame_options_header
+ */
+class Tests_Functions_sendFrameOptionsHeader extends WP_UnitTestCase {
+
+	/**
+	 * @ticket 59851
+	 *
+	 * @requires function xdebug_get_headers
+	 */
+	public function test_send_frame_options_header_sends_expected_headers() {
+		send_frame_options_header();
+
+		$headers = xdebug_get_headers();
+
+		$this->assertContains( 'X-Frame-Options: SAMEORIGIN', $headers );
+		$this->assertContains( "Content-Security-Policy: frame-ancestors 'self';", $headers );
+	}
+}