as things are meanwhile guarded by different CSP, we should add some basic tests following links and sending forms, esp between different pages (in case eg. CSP sandboxes everythings).
i think, at least parts of that could be done in an completely automated test.