<!DOCTYPE html>
<html>
  <head>
    <meta charset="UTF-8"/>
    <meta name="viewport"
    content="user-scalable=no, width=device-width, initial-scale=1">
    <meta http-equiv="Content-Security-Policy"
          content="default-src 'self' 'unsafe-inline' 'unsafe-eval'
          http://localhost:3000
          https://w3id.org/security/v1
          https://web-payments.org
          http://10.0.2.2:3000
          https://cors-anywhere.herokuapp.com
          https://api.blockcypher.com/
          https://chain.so/
          data:
          gap:
          https://ssl.gstatic.com;
          style-src 'self' 'unsafe-inline' 'unsafe-eval'">
  </head>
  <body>
    <div id="app"></div>
    <script type="text/javascript" src="cordova.js"></script>
  </body>
</html>

<!DOCTYPE html>
<html>
  <head>
    <meta charset="UTF-8"/>
    <meta name="viewport"
    content="user-scalable=no, width=device-width, initial-scale=1">
    <meta http-equiv="Content-Security-Policy"
          content="default-src 'self' 'unsafe-inline' 'unsafe-eval'
          http:
          https:
          data:
          gap: ;
          style-src 'self' 'unsafe-inline' 'unsafe-eval'">
  </head>
  <body>
    <div id="app"></div>
    <script type="text/javascript" src="cordova.js"></script>
  </body>
</html>

Allow access to any domain, necessary for login auth
Allow access to any domain, necessary for login auth
