fix: cookie vuln

jest.config.js

@@ -2,7 +2,7 @@ const path = require('path');
 
 module.exports = {
   rootDir: path.resolve('./'),
-  testEnvironment: 'jest-environment-jsdom',
+  testEnvironment: 'jest-fixed-jsdom',
   testEnvironmentOptions: {
     url: 'http://localhost/',
   },

package.json

@@ -31,6 +31,8 @@
     "@shopify/network": "^3.3.0",
     "@shopify/react-performance": "^4.1.1",
     "events": "^3.3.0",
+    "jest-environment-jsdom": "^29.7.0",
+    "jest-fixed-jsdom": "^0.0.6",
     "promjs": "^0.4.1",
     "react-beforeunload": "^2.6.0"
   },
@@ -50,8 +52,7 @@
     "eslint": "8.57.0",
     "eslint-import-resolver-typescript": "3.6.3",
     "jest": "29.7.0",
-    "jest-environment-jsdom": "29.7.0",
-    "msw": "1.3.5",
+    "msw": "^2.6.0",
     "prettier": "3.3.3",
     "react": "18.3.1",
     "react-dom": "18.3.1",

test/mockServer.ts

@@ -1,15 +1,16 @@
-import { matchRequestUrl, MockedRequest, rest } from 'msw';
+import { delay, http, HttpResponse, matchRequestUrl, MockedRequest } from 'msw';
 import { setupServer } from 'msw/node';
 
 export const server = setupServer(
-  rest.post(
-    'http://push-aggregation-gateway/push-metrics',
-    (_req, res, ctx) => {
-      return res(ctx.delay(), ctx.status(200));
-    },
-  ),
-  rest.post('http://push-aggregation-gateway/server-down', (_req, res, ctx) => {
-    return res(ctx.delay(), ctx.status(503));
+  http.post('http://push-aggregation-gateway/push-metrics', async () => {
+    await delay(1);
+    return new HttpResponse(null, { status: 200 });
+    // return res(ctx.delay(), ctx.status(200));
+  }),
+  http.post('http://push-aggregation-gateway/server-down', async () => {
+    await delay(1);
+    return new HttpResponse(null, { status: 503 });
+    // return res(ctx.delay(), ctx.status(503));
   }),
 );
 
@@ -19,7 +20,7 @@ export const waitForRequests = async (
   expectedRequests = 1,
 ) => {
   const requestIds: string[] = [];
-  const requests: MockedRequest[] = [];
+  const requests = [];
 
   return new Promise<MockedRequest[]>((resolve, reject) => {
     server.events.on('request:start', (req) => {