From d437c057706f0fbb3a407ddc040127e2c9313e05 Mon Sep 17 00:00:00 2001
From: Josh Creek <8179928+jcreek@users.noreply.github.com>
Date: Sat, 10 Jan 2026 21:50:56 +0000
Subject: [PATCH] refactor(#48): Address PR comment

---
 src/app.html | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/src/app.html b/src/app.html
index 9f46cc6..0552d01 100644
--- a/src/app.html
+++ b/src/app.html
@@ -4,12 +4,12 @@
 		<meta charset="utf-8" />
 		<link rel="icon" href="%sveltekit.assets%/favicon.png" />
 		<meta name="viewport" content="width=device-width, initial-scale=1" />
-		%sveltekit.head%
 		<script>
 			(function () {
 				try {
 					const storedTheme = localStorage.getItem('theme');
-					const theme = storedTheme || 'pokeball';
+					const allowed = ['pokeball', 'dark'];
+					const theme = storedTheme && allowed.includes(storedTheme) ? storedTheme : 'pokeball';
 					document.documentElement.setAttribute('data-theme', theme);
 				} catch (e) {
 					// Fallback to default theme if localStorage is not accessible
@@ -17,6 +17,7 @@
 				}
 			})();
 		</script>
+		%sveltekit.head%
 		<link rel="stylesheet" href="%sveltekit.assets%/output.css" />
 	</head>
 	<body data-sveltekit-preload-data="hover">
