<meta http-equiv="Content-Security-Policy"
          content="default-src * data: gap: https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline' *
          script-src 'self' 'unsafe-inline' 'unsafe-eval'
                           *
                           ;">