内容安全政策cordova问题(Content Security Policy cordova problems)

 我在我的Windows PC上使用ionic创建了一个应用程序，现在当切换到mac时，我从控制台收到此错误 
 
 
 
 “拒绝加载https://lorem.firebaseio.com/.lp?start=t&ser=59502592&cb=11&v=5，因为它没有出现在Content Security的script-src指令中”。 
 
 
 我已经尝试在我的标题中修改我的CSP标签，我似乎无法让它工作。 此外，我尝试重新添加所有插件/平台/资源。 
 
 我现在使用的标签是 
 
 <meta http-equiv="Content-Security-Policy" content="default-src * data: cdvfile: gap:; style-src 'self'  https://cdn.firebase.com https://*.firebaseio.com https://lorem.firebaseio.com/*; script-src 'self' 'unsafe-eval'">
 
 我也想知道为什么我不能像过去那样将它添加到我的白名单插件中 
 
  <allow-navigation href="*"/>
  <allow-navigation href="http://192.168.178.13:8100"/>
  <allow-intent href="*.firebaseio.com"/>
  <allow-intent href="auth.firebase.com"/>
 
 ----------------------------- edit -------------------- --------- 
 
 为了解决我的所有问题，我使用了这3个标签 
 
content="default-src * data: cdvfile: gap:; 
      style-src 'self'  'unsafe-inline';
      img-src 'self' 'unsafe-inline';
      script-src 'self' https://lorem.firebaseio.com/* 
                        https://cdn.firebase.com
                        https://*.firebaseio.com
                        'unsafe-eval'">

I made an app using ionic on my windows pc, now when switching to a mac i get this error from the console 
 
 
 
"Refused to load https://lorem.firebaseio.com/.lp?start=t&ser=59502592&cb=11&v=5 because it does not appear in the script-src directive of the Content Security ".
 
 
Already i tried modifying my CSP tag in my header, i cant seem to get it to work tho. Also i tried re-adding all plugins/platforms/resouce. 
 
The tag im using right now is
 
 <meta http-equiv="Content-Security-Policy" content="default-src * data: cdvfile: gap:; style-src 'self'  https://cdn.firebase.com https://*.firebaseio.com https://lorem.firebaseio.com/*; script-src 'self' 'unsafe-eval'">
 
Also im wondering why i cant add this to my whitelist plugin like i did in the past
 
  <allow-navigation href="*"/>
  <allow-navigation href="http://192.168.178.13:8100"/>
  <allow-intent href="*.firebaseio.com"/>
  <allow-intent href="auth.firebase.com"/>
 
----------------------------- edit -----------------------------
 
To fix all of my issues i used this 3 tags
 
content="default-src * data: cdvfile: gap:; 
      style-src 'self'  'unsafe-inline';
      img-src 'self' 'unsafe-inline';
      script-src 'self' https://lorem.firebaseio.com/* 
                        https://cdn.firebase.com
                        https://*.firebaseio.com
                        'unsafe-eval'">

原文：https://stackoverflow.com/questions/40679720