Repository: withastro/astro
File: packages/astro/src/types/public/config.ts (TypeScript)

Code before:
						 *   }
						 * });
						 * ```
						 *
						 * After the build, the `<meta>` element will instead apply your sources to the `style-src` directives:
						 *
						 * ```html
						 * <head>
						 *   <meta
						 *     http-equiv="content-security-policy"
						 *     content="
						 *      style-src 'self' https://styles.cdn.example.com 'sha256-somehash';
						 *     "
						 *   >
						 * </head>
						 * ```
						 *
						 * When resources are inserted multiple times or from multiple sources (e.g. defined in your `csp` config and added using [the CSP runtime API](/en/reference/api-reference/#csp)), Astro will merge and deduplicate all resources to create your `<meta>` element.
						 */
						resources?: string[];
					};

					/**
					 * @docs
					 * @name security.csp.scriptDirective
					 * @type {{ hashes?: CspHash[], resources?: string[], strictDynamic?: boolean }}
					 * @default `undefined`
					 * @version 6.0.0
					 * @description
					 *
					 * A configuration object that allows you to override the default sources for the `script-src` directive with the [`resources`](https://v6.docs.astro.build/en/reference/configuration-reference/#resources) property, or to provide additional [hashes]((https://v6.docs.astro.build/en/reference/configuration-reference#hashes) to be rendered.
					 */
					scriptDirective?: {
						/**
						 * @docs
						 * @name security.csp.scriptDirective.hashes
						 * @type {CspHash[]}
						 * @default `[]`
						 * @version 6.0.0
						 * @description
						 *
						 * A list of additional hashes to be rendered.
						 *
						 * You must provide hashes that start with `sha384-`, `sha512-` or `sha256-`. Other values will cause a validation error. These hashes are added to all pages.
						 *
						 * ```js title="astro.config.mjs"
						 * import { defineConfig } from 'astro/config';
						 *
						 * export default defineConfig({
						 *   security: {
						 *     csp: {

Review comment (suggestion):
Same here:

```suggestion
					 * @type {{ hashes: CspHash[], resources: string[], strictDynamic: boolean }}
```

Code after:
						 *         ]
						 *       }
						 *     }
						 *   }
						 * });
						 * ```
						 *
						 * After the build, the `<meta>` element will instead apply your sources to the `style-src` directives:
						 *
						 * ```html
						 * <head>
						 *   <meta
						 *     http-equiv="content-security-policy"
						 *     content="
						 *      style-src 'self' https://styles.cdn.example.com 'sha256-somehash';
						 *     "
						 *   >
						 * </head>
						 * ```
						 *
						 * When resources are inserted multiple times or from multiple sources (e.g. defined in your `csp` config and added using [the CSP runtime API](/en/reference/api-reference/#csp)), Astro will merge and deduplicate all resources to create your `<meta>` element.
						 */
						resources?: string[];
					};

					/**
					 * @docs
					 * @name security.csp.scriptDirective
					 * @type {CspScriptDirective}
					 * @default `undefined`
					 * @version 6.0.0
					 * @description
					 *
					 * A configuration object that allows you to override the default sources for the `script-src` directive with the [`resources`](https://v6.docs.astro.build/en/reference/configuration-reference/#resources) property, or to provide additional [hashes]((https://v6.docs.astro.build/en/reference/configuration-reference#hashes) to be rendered.
					 */
					scriptDirective?: {
						/**
						 * @docs
						 * @name security.csp.scriptDirective.hashes
						 * @type {CspHash[]}
						 * @default `[]`
						 * @version 6.0.0
						 * @description
						 *
						 * A list of additional hashes to be rendered.
						 *
						 * You must provide hashes that start with `sha384-`, `sha512-` or `sha256-`. Other values will cause a validation error. These hashes are added to all pages.
						 *
						 * ```js title="astro.config.mjs"
						 * import { defineConfig } from 'astro/config';
						 *