title: How to use meta tag for resolving Content security policy issue for loading an external script
body: <p>I am trying to load google maps through an external script (<a href="https://maps.googleapis.com/maps/api/js?key=AIzaSyABsNkQCBQ6oq0vqSJ8JyogrVXq2Ot0CaA" rel="nofollow noreferrer">https://maps.googleapis.com/maps/api/js?key=AIzaSyABsNkQCBQ6oq0vqSJ8JyogrVXq2Ot0CaA</a>) in the browser which gives the following content security policy error:</p>
  
  <p><em>"Refused to load the script '<a href="https://maps.googleapis.com/maps/api/js?key=AIzaSyABsNkQCBQ6oq0vqSJ8JyogrVXq2Ot0CaA" rel="nofollow noreferrer">https://maps.googleapis.com/maps/api/js?key=AIzaSyABsNkQCBQ6oq0vqSJ8JyogrVXq2Ot0CaA</a>' because it violates the following Content Security Policy directive: "script-src 'self...."</em></p>
  
  <p>So, i tried adding the following meta tag to the html file inside  tag but still getting the same error:</p>
  
  <pre><code>&lt;meta http-equiv="Content-Security-Policy"  
          content="default-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; script-src 'self' https://maps.googleapis.com 'unsafe-inline' 'unsafe-eval';"/&gt;
  </code></pre>