As per the attached photos the tests on the information security project 2 are passing even when passing in the URL for twitter, so I can’t actually test my project as I go, but perhaps more concerningly I can get it to pass by only having helmet actions defined…
This is by design. The project is awaiting contribution (information in the link above).
If you want to test your app, there is nothing stopping you from writing your own Mocha/Chai/Zombie tests - you have been taught how to use these in the previous sections.