title: Cordova hybrid mobile app getting SecurityError connecting to O365
body: <p>My Cordova app is getting the following error when running on my Android device:</p>
  
  <blockquote>
    <p>Uncaught SecurityError: Failed to execute 'open' on 'XMLHttpRequest': Refused to connect to '<a href="https://login.microsoftonline.com/common/oauth2/token" rel="nofollow">https://login.microsoftonline.com/common/oauth2/token</a>' because it violates the document's Content Security Policy.</p>
  </blockquote>
  
  <p>However, when I run the app inside VS 2015 Ripple emulator it works exactly as expected. Is there something I need to add to the Content Security Policy to allow authentication to take place on my device? </p>