I am trying to deploy my app following the code-push doc. I then added the following content-security to my app index.html
solved with:
script-src 'self' http://xxxx 'unsafe-inline' 'unsafe-eval';