diff --git a/frontend/src/app/app.config.ts b/frontend/src/app/app.config.ts
index 15451ae..9281b18 100644
--- a/frontend/src/app/app.config.ts
+++ b/frontend/src/app/app.config.ts
@@ -1,6 +1,7 @@
 import type { ApplicationConfig } from '@angular/core';
 import { provideHttpClient, withFetch } from '@angular/common/http';
 import { provideRouter, withInMemoryScrolling } from '@angular/router';
+import { provideClientHydration, withNoIncrementalHydration } from '@angular/platform-browser';
 
 import { environment } from '../environments/environment';
 import { API_CONFIG } from './core/api-config';
@@ -8,6 +9,9 @@ import { routes } from './app.routes';
 
 export const appConfig: ApplicationConfig = {
   providers: [
+    // Event replay emits executable inline bootstrap scripts. Keep hydration
+    // without replay to preserve the production CSP's JSON-only invariant.
+    provideClientHydration(withNoIncrementalHydration()),
     provideRouter(
       routes,
       withInMemoryScrolling({