From 59f03827bc68ea3d9c24bad421367ad7562c8f48 Mon Sep 17 00:00:00 2001
From: openhands <openhands@all-hands.dev>
Date: Sat, 1 Aug 2026 21:46:00 +0200
Subject: [PATCH] fix: add CSP hashes for inline styles from Google
 Fonts/Tailwind

---
 src/lib/csp.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/lib/csp.ts b/src/lib/csp.ts
index 092bf27c..1b097e2a 100644
--- a/src/lib/csp.ts
+++ b/src/lib/csp.ts
@@ -20,6 +20,11 @@ export function buildContentSecurityPolicy(nonce: string): string {
 		"'self'",
 		`'nonce-${nonce}'`,
 		"https://fonts.googleapis.com",
+		"'sha256-Kj92o2EIJOPxE06VhJbN8NBhB0Nq5lhNV8aXMMLf5fQ='",
+		"'sha256-NwXHG+Ak6jw1mAqOvXUBP4wBN4kCG04iIIqq24r5gqY='",
+		"'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='",
+		"'sha256-CIxDM5jnsGiKqXs2v7NKCY5MzdR9gu6TtiMJrDw29AY='",
+		"'sha256-599zOKM2ViWVJC0ovicF5YwQ3sRN4OtbjneHwKvkzkY='",
 		...(isDev ? ["'unsafe-inline'"] : []),
 	].join(" ");