<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="Content-Security-Policy" content="style-src 'self' 'unsafe-inline'; media-src *">
<meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=no">
<meta name="theme-color" content="#2F99CD">
<meta name="format-detection" content="telephone=no">
<meta name="msapplication-tap-highlight" content="no">
<link href="css/FiraSans/font.css" rel="stylesheet">
<link href="css/app.css" rel="stylesheet">
<link href="css/home.css" rel="stylesheet">
<link href="css/vendors/philips-hue.css" rel="stylesheet">
<link rel="manifest" href="manifest.webmanifest">
<link rel="icon" sizes="32x32" href="img/icons/32.png">
<link rel="icon" sizes="512x512" href="img/icons/512.png">
<meta name="application-name" content="Foxbox Client">
<title>Foxbox Client</title>
<script defer src="components/react/react.js"></script>
<script defer src="components/react/react-dom.js"></script>
<script defer src="js/initapp.js"></script>
</head>
<body>
<section id="main" class="active"></section>
</body>
</html>

<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="Content-Security-Policy" content="default-src 'self' ; style-src 'self' 'unsafe-inline' ; connect-src * ;">
<meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=no">
<meta name="theme-color" content="#2F99CD">
<meta name="format-detection" content="telephone=no">
<meta name="msapplication-tap-highlight" content="no">
<link href="css/FiraSans/font.css" rel="stylesheet">
<link href="css/app.css" rel="stylesheet">
<link href="css/home.css" rel="stylesheet">
<link href="css/vendors/philips-hue.css" rel="stylesheet">
<link rel="manifest" href="manifest.webmanifest">
<link rel="icon" sizes="32x32" href="img/icons/32.png">
<link rel="icon" sizes="512x512" href="img/icons/512.png">
<meta name="application-name" content="Foxbox Client">
<title>Foxbox Client</title>
<script defer src="components/react/react.js"></script>
<script defer src="components/react/react-dom.js"></script>
<script defer src="js/initapp.js"></script>
</head>
<body>
<section id="main" class="active"></section>
</body>
</html>

Fix CSP to allow connect-src to http
Fix CSP to allow connect-src to http
