Error: Refused to execute a script because its hash, its nonce, or 'unsafe-inline' does not appear in the script-src directive of the Content Security Policy.

[DePasqualeOrg]

I have the following in svelte.config.js:

    csp: {
      directives: {
        'script-src': ['self'],
        'object-src': ['none'],
        'base-uri': ['self'],
      },
    },

And on this line in the page's head
<link href="./_app/immutable/assets/0.b25ede98.css" rel="stylesheet">
I get the error "Refused to execute a script because its hash, its nonce, or 'unsafe-inline' does not appear in the script-src directive of the Content Security Policy."

If I'm not mistaken, this is the CSS that gets built by SvelteKit. What do I need to change to fix this?