[Bug] Blank page on web app - CSP blocks SvelteKit hydration scripts

[tazmeen24]

Description

The web app at https://dev-card-web.vercel.app/ renders a blank page.
CSS loads but no JS executes - SvelteKit never hydrates.

Root Cause

svelte.config.js uses csp.mode: 'auto' with script-src: unsafe-inline.
On Vercel (serverless), the nonce in the CSP header and the injected script tag mismatch → script blocked → blank page.

Steps to Reproduce

1. Visit https://dev-card-web.vercel.app/
2. Open DevTools → Network tab
3. Only 2 CSS files load, no JS, page is blank

Expected Behavior

Landing page renders normally.

Tasks

• Fix CSP config in apps/web/svelte.config.js
• Verify deployment renders on Vercel

Area

web

Screenshots of the issue

[tazmeen24]

I'd like to work on this under GSSoC 2026. Please assign it to me.

[imposterbharathkumarburugu15-cpu]

I'd like to work on this under GSSoC 2026. Please assign it to me.
/assign gssoc 26

[Harxhit]

@tazmeen24 I have assigned this issue to you. Please join our discord channel from readme section.