[Solved] Whats the most restricted Content-Security-Policy to enable facebook connect

by


This is the minimum requirements that worked for me, to use facebook connect from ionic / cordova.
Big thanks for @luschn for guidance and assistant to debug it properly.

<meta http-equiv="Content-Security-Policy" 
content="style-src 'self' 'unsafe-inline';
         script-src 'self' 'unsafe-inline' 'unsafe-eval' 
                     http://localhost https://connect.facebook.net;
         connect-src 'self'
                        https://*.mydomain.com <!-- Replace with your own 
                                                    domain-->
                        https://*.facebook.net ws: wss:;
">

solved Whats the most restricted Content-Security-Policy to enable facebook connect