Thank you for taking the time to contribute this.

At first glance, it looks good!

Let me know if have some bugs that i need to fix..

i see :

Content-Security-Policy: The page’s settings blocked the loading of a resource (img-src) at data:image/svg+xml;charset=utf8,%3Csvg x… because it violates the following directive: “default-src 'self'”

for some reason the button seems to be left aligned here?

i see :

Content-Security-Policy: The page’s settings blocked the loading of a resource (img-src) at data:image/svg+xml;charset=utf8,%3Csvg x… because it violates the following directive: “default-src 'self'”

Adding this to header.php might suffice?

header("Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src data: 'unsafe-eval';  img-src 'self' data:");

and this in header.tpl -

    <meta http-equiv='Content-Security-Policy' content="default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src data: 'unsafe-eval';  img-src 'self' data:"/>

I'm not really sure why we have the meta variant and also set a header() from common.php.

(functionality appears to work fine to me - it detected i have a dark theme, and behaved as expected ... I could switch between light mode and dark mode).