From 63704203927faec8f2b36c51367fc467315a2ff8 Mon Sep 17 00:00:00 2001
From: wukko <me@wukko.me>
Date: Sun, 4 May 2025 15:10:53 +0600
Subject: [PATCH] web/svelte.config: allow inline img event call

will be used for smooth fade in of images
---
 web/svelte.config.js | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/web/svelte.config.js b/web/svelte.config.js
index a5adc8a6..5c5c6b4e 100644
--- a/web/svelte.config.js
+++ b/web/svelte.config.js
@@ -78,6 +78,13 @@ const config = {
                     "sha256-g67gIjM3G8yMbjbxyc3QUoVsKhdxgcQzCmSKXiZZo6s=",
                 ],
 
+                "script-src-attr": [
+                    "unsafe-hashes",
+                    // hash of inline img event call
+                    // see: https://github.com/sveltejs/svelte/issues/14014
+                    "sha256-7dQwUgLau1NFCCGjfn9FsYptB6ZtWxJin6VohGIu20I="
+                ],
+
                 "frame-ancestors": ["none"]
             }
         },