From 20d18196211d3dbca3d3503a2a11503a79294cb9 Mon Sep 17 00:00:00 2001
From: root <melabidi@alrahmaisgl.org>
Date: Thu, 25 Jun 2026 20:17:36 -0400
Subject: [PATCH] fix: allow unsafe-inline styles in dev CSP, suppress
 hydration warning on theme bootstrap script

---
 src/app/[locale]/layout.tsx | 1 +
 src/lib/security/csp.ts     | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/app/[locale]/layout.tsx b/src/app/[locale]/layout.tsx
index 30a97ae..28b1561 100644
--- a/src/app/[locale]/layout.tsx
+++ b/src/app/[locale]/layout.tsx
@@ -56,6 +56,7 @@ export default async function LocaleLayout({ children, params }: LocaleLayoutPro
         <script
           id="theme-bootstrap"
           nonce={nonce}
+          suppressHydrationWarning
           dangerouslySetInnerHTML={{ __html: themeBootstrapScript }}
         />
       </head>
diff --git a/src/lib/security/csp.ts b/src/lib/security/csp.ts
index 3f2ffc8..00acc9e 100644
--- a/src/lib/security/csp.ts
+++ b/src/lib/security/csp.ts
@@ -9,7 +9,7 @@ export function buildContentSecurityPolicy(nonce: string, development: boolean):
   const directives = [
     "default-src 'self'",
     `script-src ${scriptSources.join(' ')}`,
-    `style-src 'self' 'nonce-${nonce}'`,
+    `style-src 'self' 'nonce-${nonce}'${development ? " 'unsafe-inline'" : ''}`,
     "img-src 'self' data: blob:",
     "font-src 'self' data:",
     `connect-src 'self'${development ? ' ws: wss:' : ''}`,