feat(security): enforce CSP (flip from report-only to directives)

dani-polani · claude · dani-polani · commit c56a9d22d4b4 · 2026-06-27T15:20:41.000+03:00
QA passed in report-only mode; switching to enforcing.

Co-Authored-By: Claude Sonnet 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/bitext/svelte.config.js b/bitext/svelte.config.js
@@ -49,7 +49,8 @@ const config = {
 		// `reportOnly` to `directives` once QA is clean (see the CSP task).
 		csp: {
 			mode: 'auto',
-			reportOnly: cspDirectives
+			// reportOnly: cspDirectives
+			directives: cspDirectives,
 		}
 	}
 };

Original file line number	Diff line number	Diff line change
`@@ -49,7 +49,8 @@ const config = {`
`49`	`49`	// `reportOnly` to `directives` once QA is clean (see the CSP task).
`50`	`50`	`csp: {`
`51`	`51`	`mode: 'auto',`
`52`		`- reportOnly: cspDirectives`
	`52`	`+ // reportOnly: cspDirectives`
	`53`	`+ directives: cspDirectives,`
`53`	`54`	`}`
`54`	`55`	`}`
`55`	`56`	`};`