From 7fd6d7565fa9d849ac4953174a37fd33cd28232e Mon Sep 17 00:00:00 2001
From: rory <rory@expensify.com>
Date: Mon, 2 Nov 2026 14:13:04 -0800
Subject: [PATCH] test: add PR preview fixture B

---
 web/cloudflare-worker/src/index.ts         | 2 ++
 web/cloudflare-worker/tests/worker.test.ts | 1 +
 web/index.html                             | 1 +
 3 files changed, 4 insertions(+)

diff --git a/web/cloudflare-worker/src/index.ts b/web/cloudflare-worker/src/index.ts
index 10fa2a129487..c11353c69c2d 100644
--- a/web/cloudflare-worker/src/index.ts
+++ b/web/cloudflare-worker/src/index.ts
@@ -90,6 +90,8 @@ function buildAssetRequest(request: Request, url: URL, pathSuffix = ''): Request
 }
 
 function setSecurityHeaders(headers: Headers, environment: Env['ENVIRONMENT'] | DevelopmentEnv['ENVIRONMENT'], nonce: string, developmentOrigins?: DevelopmentOrigins) {
+    // Paired with the HTML marker to distinguish Worker code from Static Assets during the E2E experiment.
+    headers.set('X-Preview-Experiment', 'B-v1');
     headers.set('Strict-Transport-Security', 'max-age=31536000; includeSubDomains; preload');
     headers.set('Content-Security-Policy', getCSP(environment, nonce, developmentOrigins));
     headers.set('X-Frame-Options', 'SAMEORIGIN');
diff --git a/web/cloudflare-worker/tests/worker.test.ts b/web/cloudflare-worker/tests/worker.test.ts
index 4e59814acb28..3f5494de11e6 100644
--- a/web/cloudflare-worker/tests/worker.test.ts
+++ b/web/cloudflare-worker/tests/worker.test.ts
@@ -29,6 +29,7 @@ function getHTMLNonce(html: string): string | undefined {
 }
 
 function assertSecurityHeaders(response: Response) {
+    assert.equal(response.headers.get('X-Preview-Experiment'), 'B-v1');
     assert.equal(response.headers.get('Strict-Transport-Security'), 'max-age=31536000; includeSubDomains; preload');
     assert.equal(response.headers.get('X-Frame-Options'), 'SAMEORIGIN');
     assert.equal(response.headers.get('X-Content-Type-Options'), 'nosniff');
diff --git a/web/index.html b/web/index.html
index a7090861da54..d3f2de3e0305 100644
--- a/web/index.html
+++ b/web/index.html
@@ -2,6 +2,7 @@
 <html lang="en">
 <head>
     <meta charset="utf-8" />
+    <meta name="pr-testing-experiment" content="B-v1" />
     <title>New Expensify</title>
     <meta name="description" content="Corporate cards, reimbursements, receipt scanning, invoicing, and bill pay.">
     <meta name="theme-color" content="#03D47C">