mirror of
https://github.com/PerpetualSoftware/pad.git
synced 2026-09-23 11:03:41 +00:00
313bc48419
The script-src 'self' CSP directive blocked SvelteKit's inline bootstrap scripts, causing a white screen on mobile browsers which enforce CSP strictly. Add 'unsafe-inline' as a temporary fix until nonce-based CSP is implemented (TASK-163).