允许Web套接字的content-security-policy元标记(content-security-policy meta tag for allowing web socket)

 情况：由content-security-policy元标记阻止的phonegap serve的自动phonegap serve 
 
 添加内容安全策略可防止自动重新加载phonegap serve实用程序。 这是建立在cordova serve之上，但在文件编辑时自动重新加载应用程序。 它的工作原理是在index.html注入socket.io 。 我应该在我的CSP元标记中指定哪些内容允许套接字连接到我的笔记本电脑。 
 
 这是我目前的CSP元标记： 
 
<meta http-equiv="Content-Security-Policy" content="default-src 'self' 192.168.0.100 * ws:* ; connect-src ws://192.168.0.100 ws:*"> 
 
 但是在打开时，设备会一直显示“正在连接到设备”，而不会在设备上收到事件。 
 
 另请注意，它开始处理删除此元标记，这意味着cordova-plugin-whitelist可能无法阻止它。 

Situation: autoreload of phonegap serve blocked by content-security-policy meta tag
 
Adding content security policy prevents auto-reload of phonegap serve utility. This is built on top of cordova serve but auto-reloads the app on file editing. It works by injecting socket.io in index.html. What should I specify in my CSP meta tag that will allow socket connections to my laptop. 
 
Here is my current CSP meta tag:
 
<meta http-equiv="Content-Security-Policy" content="default-src 'self' 192.168.0.100 * ws:* ; connect-src ws://192.168.0.100 ws:*"> 
 
However on opening, the device keeps showing "Connecting to device" and not event is received on the device.
 
Also note that it starts working on removing this meta tag which mean the cordova-plugin-whitelist might not be blocking it.

原文：https://stackoverflow.com/questions/32986074