diff --git a/runtime/src/server/middleware/get_page_handler.ts b/runtime/src/server/middleware/get_page_handler.ts
index 53f413640..16a0768ba 100644
--- a/runtime/src/server/middleware/get_page_handler.ts
+++ b/runtime/src/server/middleware/get_page_handler.ts
@@ -292,6 +292,9 @@ export function get_page_handler(
script += ``)
diff --git a/site/content/docs/12-security.md b/site/content/docs/12-security.md
index 036568162..088d39510 100644
--- a/site/content/docs/12-security.md
+++ b/site/content/docs/12-security.md
@@ -6,9 +6,9 @@ By default, Sapper does not add security headers to your app, but you may add th
### Content Security Policy (CSP)
-Sapper generates inline `