title: Violates content security policy directive: img-src * 'self' data: https:"
body: <p>I'm trying to get <code>dynamic</code> image from my server and I got these <code>errors</code>.
  First I was getting </p>
  
  <p><code>Content Security Policy directive: "default-src *". 
  Note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback.</code></p>
  
  <p>My content was:</p>
  
  <pre><code>&lt;meta http-equiv="Content-Security-Policy" content="default-src *;  'self' 'unsafe-inline' 'unsafe-eval' data: gap: content:"&gt;
  </code></pre>
  
  <p>Then I searched on stackoverflow and changed my content to:</p>
  
  <pre><code>&lt;meta http-equiv="Content-Security-Policy" content="default-src *;
     img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *;
     style-src  'self' 'unsafe-inline' *"&gt;
  </code></pre>
  
  <p><code>violates the following Content Security Policy directive: "img-src * 'self' data: https:".</code></p>