From f475e379ab9beb6db73a8091389309bdafc16c47 Mon Sep 17 00:00:00 2001
From: gsaynac <gildas@nelio.io>
Date: Fri, 16 Sep 2016 15:01:44 +0200
Subject: [PATCH] Add ws: and wss: sources to default CSP for Cordova (#7774)

CircleCI tests are still timing out, but I believe this change is safe to merge.
---
 packages/boilerplate-generator/boilerplate_web.cordova.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/boilerplate-generator/boilerplate_web.cordova.html b/packages/boilerplate-generator/boilerplate_web.cordova.html
index c2776afafe..9c4f7fac4c 100644
--- a/packages/boilerplate-generator/boilerplate_web.cordova.html
+++ b/packages/boilerplate-generator/boilerplate_web.cordova.html
@@ -4,7 +4,7 @@
   <meta name="format-detection" content="telephone=no">
   <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width, height=device-height">
   <meta name="msapplication-tap-highlight" content="no">
-  <meta http-equiv="Content-Security-Policy" content="default-src * data: blob: 'unsafe-inline' 'unsafe-eval';">
+  <meta http-equiv="Content-Security-Policy" content="default-src * data: blob: 'unsafe-inline' 'unsafe-eval' ws: wss:;">
 
 {{! We are explicitly not using bundledJsCssUrlRewriteHook: in cordova we serve assets up directly from disk, so rewriting the URL does not make sense }}