fix(astro): update wrong content in CSP meta tag (#13905)

* fix(astro): update wrong content in CSP meta tag

* patch

* Increase timeout

---------

Co-authored-by: Matt Kane <[email protected]>

Author: jsparkdev

.changeset/orange-books-check.md

@@ -0,0 +1,5 @@
+---
+'astro': patch
+---
+
+Fixes wrong contents in CSP meta tag.

.github/workflows/ci.yml

@@ -34,7 +34,7 @@ jobs:
   build:
     name: "Build: ${{ matrix.os }}"
     runs-on: ${{ matrix.os }}
-    timeout-minutes: 3
+    timeout-minutes: 5
     strategy:
       matrix:
         OS: [ubuntu-latest, windows-latest]

packages/astro/src/runtime/server/render/csp.ts

@@ -36,7 +36,7 @@ export function renderCspContent(result: SSRResult): string {
 	}
 
 	const strictDynamic = result.isStrictDynamic ? ` strict-dynamic` : '';
-	const scriptSrc = `style-src ${styleResources} ${Array.from(finalStyleHashes).join(' ')}${strictDynamic};`;
-	const styleSrc = `script-src ${scriptResources} ${Array.from(finalScriptHashes).join(' ')};`;
+	const scriptSrc = `script-src ${scriptResources} ${Array.from(finalScriptHashes).join(' ')}${strictDynamic};`;
+	const styleSrc = `style-src ${styleResources} ${Array.from(finalStyleHashes).join(' ')};`;
 	return `${directives} ${scriptSrc} ${styleSrc}`;
 }