diff --git a/internal/middleware/security_headers.go b/internal/middleware/security_headers.go
index b6c0320c..27447ead 100644
--- a/internal/middleware/security_headers.go
+++ b/internal/middleware/security_headers.go
@@ -13,7 +13,7 @@ func SecurityHeadersMiddleware() echo.MiddlewareFunc {
 			c.Response().Header().Set("X-Frame-Options", "DENY")
 			c.Response().Header().Set("X-XSS-Protection", "1; mode=block")
 			c.Response().Header().Set("Strict-Transport-Security", "max-age=31536000; includeSubDomains; preload")
-			c.Response().Header().Set("Content-Security-Policy", "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:")
+			c.Response().Header().Set("Content-Security-Policy", "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:")
 			c.Response().Header().Set("Referrer-Policy", "strict-origin-when-cross-origin")
 			c.Response().Header().Set("Permissions-Policy", "geolocation=(), microphone=(), camera=()")
 
diff --git a/web/src/theme.ts b/web/src/theme.ts
index 4b61b594..d0b39c27 100644
--- a/web/src/theme.ts
+++ b/web/src/theme.ts
@@ -288,8 +288,11 @@ Alpine.data("theme", () => ({
   changeTheme,
   changeWoodPaneling,
   initializeTheme,
+  loadTheme,
+  loadUserTheme,
   loadWoodPaneling,
   revealCurrentTheme,
+  updateThemeIndicators,
   updateWoodPanelingIndicators,
 }));