Add a Content-Security-Policy so that android stops nagging us

shankari · Feb 29, 2016 · 9d67f69 · 9d67f69
1 parent b3a2465
commit 9d67f69
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/www/index.html b/www/index.html
@@ -3,6 +3,10 @@
   <head>
     <meta charset="utf-8">
     <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=no, width=device-width">
+    <meta http-equiv="Content-Security-Policy"
+        content="default-src 'self' data: gap: https://ssl.gstatic.com http://nominatim.openstreetmap.org 'unsafe-inline';
+            style-src 'self' 'unsafe-inline';
+            img-src 'self' http://*.tile.openstreetmap.org">
     <title></title>
 
     <link href="lib/ionic/css/ionic.css" rel="stylesheet">