Content-Security-Policy and external Javascript file
<p>I am currently developing an android app using Phonegap/Cordova for a hotel client. The app is to download the menu and content from their wordpress site so I need to load image from their live url. I have this working by making some tweaks to the config.xml file and adding the following metatag to each page;</p>

<pre><code>&lt;meta http-equiv="Content-Security-Policy" content="default-src 'self' *; script-src 'unsafe-inline' 'self' *;style-src 'unsafe-inline' 'self' *;img-src 'unsafe-inline' 'self' *"&gt;
</code></pre>

<p>Also in the app they want their Booking facility to be integrated which is provided by their booking supplier in form of Javascript. The above metatag is stopping the booking form from loading (it works when I remove the tag). </p>

<p>You can view the code on my <a href="https://jsfiddle.net/bp3435w4/" rel="nofollow noreferrer">JSFiddle Page</a> or below.</p>

<p>You will see that it works when you run it without the Metatag. I have added the script-src and tried a number of settings from <a href="https://content-security-policy.com/" rel="nofollow noreferrer">https://content-security-policy.com/</a> including adding object-src &amp; frame-src.</p>

<p>Please Help</p>

<p><div class="snippet" data-lang="js" data-hide="false" data-console="true" data-babel="false">
<div class="snippet-code">
<pre class="snippet-code-js lang-js prettyprint-override"><code>eviivo.availabilitychecker.create('#availabilitychecker', {
  industryTypes: [1],
  allowCrossDomainTracking: true,
  template: 'horizontal'
});</code></pre>
<pre class="snippet-code-css lang-css prettyprint-override"><code>&lt;style type='text/css'&gt; &lt;/style&gt; 

&lt;meta http-equiv="Content-Security-Policy" content="default-src 'self' *; script-src 'unsafe-inline' 'self' *;style-src 'unsafe-inline' 'self' *;img-src 'unsafe-inline' 'self' *"&gt; 


&lt;style type='text/css'&gt;

.eviivo_availabilitychecker {
  width: auto !important;
  height: auto !important;
  color: #333333 !important;
  background: #ffffff !important;
  border: 1px solid #DDDDDD !important;
  font-size: 12px !important;
  font-family: Arial !important;
}
.eviivo_title span {
  color: #000000 !important;
  font-size: 12px !important;
  font-family: Arial !important;
}
.eviivo_submit a {
  color: #FFFFFF !important;
  background: #F28226 !important;
  border: 1px solid #CCCCCC !important;
  font-size: 12px !important;
  font-family: Arial !important;
}
&lt;/style&gt;</code></pre>
<pre class="snippet-code-html lang-html prettyprint-override"><code>&lt;script src="https://securebooking.eviivo.com/DutchmanFY16AH.availabilitychecker.1.0.min.js"&gt;&lt;/script&gt;
&lt;script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js"&gt;&lt;/script&gt;
&lt;div id="availabilitychecker"&gt;&lt;/div&gt;</code></pre>
</div>
</div>
</p>