Fix CSP: allow unsafe-inline scripts for SvelteKit hydration

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-17 14:32:12 +07:00
parent b4eda2d553
commit 8a23a849da
1 changed files with 1 additions and 1 deletions
@@ -34,7 +34,7 @@ export const handle: Handle = async ({ event, resolve }) => {

 	response.headers.set(
 		'Content-Security-Policy',
-		"default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'"
+		"default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'"
 	);
 	response.headers.set('X-Content-Type-Options', 'nosniff');