cordova - http-equiv Content-Security-Policy works in browser but not on android device - IONIC - Stack Overflow
⚖ Content Security Policy: if few <meta http-equiv=Content-Security-Policy> at the same time - the rules of directives work by logical AND so sources that simultaneously satisfy the rules of both directives will
Testing Content-Security-Policy using Cypress ... Almost | Better world by better software
Content Security Policy (CSP) Header
On Cross-Site Scripting and Content Security Policy