CB-8295 Add content-security-policy `<meta>` to template
diff --git a/www/index.html b/www/index.html
index 2e9b253..af4f11c 100644
--- a/www/index.html
+++ b/www/index.html
@@ -19,6 +19,7 @@
 -->
 <html>
     <head>
+        <meta http-equiv="Content-Security-Policy" content="default-src 'self' data: gap: blob: https://ssl.gstatic.com/accessibility/javascript/android/; style-src 'self' 'unsafe-inline'">
         <meta name="format-detection" content="telephone=no">
         <meta name="msapplication-tap-highlight" content="no">
         <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width">