From c803caf1d3753562c6656279b623c3c1a290b9cb Mon Sep 17 00:00:00 2001
From: Tankred Hase <tankred@whiteout.io>
Date: Thu, 17 Jul 2014 18:03:21 +0200
Subject: [PATCH] Relax CSP for connect-src

---
 src/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/index.html b/src/index.html
index 6a817d2..c9efd29 100644
--- a/src/index.html
+++ b/src/index.html
@@ -5,7 +5,7 @@
     <title>Mail</title>
 
     <!-- Theses CSP rules are used as a fallback in runtimes such as Cordova -->
-    <meta http-equiv="Content-Security-Policy" content="default-src 'self' chrome-extension:; object-src 'none'; connect-src 'self' chrome-extension: https://*.whiteout.io; style-src 'self' chrome-extension: 'unsafe-inline'; img-src 'self' chrome-extension: data:">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self' chrome-extension:; object-src 'none'; connect-src *; style-src 'self' chrome-extension: 'unsafe-inline'; img-src 'self' chrome-extension: data:">
 
     <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0">
     <link rel="stylesheet" media="all" href="css/all.min.css" type="text/css">