From 12b683be1322bc003a94a65d22f92eb3fa6f49bc Mon Sep 17 00:00:00 2001
From: Tankred Hase <tankred@whiteout.io>
Date: Sun, 17 Nov 2013 16:15:07 +0100
Subject: [PATCH] cleanup ios csp

---
 src/ios.html | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/src/ios.html b/src/ios.html
index d5932a2..36bbd03 100644
--- a/src/ios.html
+++ b/src/ios.html
@@ -4,9 +4,8 @@
     <meta charset="utf-8">
     <title>Mail</title>
 
-    <!-- Theses CSP rules are used as a fallback in runtimes such as PhoneGap where setting http headers is not possbile. They get overidden if http headers are set, or in the case of chrome packaged apps. -->
-    <meta http-equiv="X-WebKit-CSP" content="default-src 'self'; object-src 'none'; connect-src *; style-src 'self' data: chrome-extension-resource: 'unsafe-inline'; img-src 'self' data: chrome-extension-resource:; frame-src 'self' data: chrome-extension-resource:; font-src 'self' data: chrome-extension-resource:; media-src *;">
-    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; object-src 'none'; connect-src *; style-src 'self' data: chrome-extension-resource: 'unsafe-inline'; img-src 'self' data: chrome-extension-resource:; frame-src 'self' data: chrome-extension-resource:; font-src 'self' data: chrome-extension-resource:; media-src *;">
+    <!-- Theses CSP rules are used as a fallback in runtimes such as PhoneGap where setting http headers is not possbile. -->
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; object-src 'none'; connect-src 'self' https://keys.whiteout.io; img-src 'self' data:;">
 
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <link rel="stylesheet" media="all" href="css/all.min.css" type="text/css">