Help - Content-Security-Policy

I am currently using Meteor 1.3.4.1. The mobile app on running gives the following messages and I need help to solve it - remove this message

The Content Security Policy 'default-src * data: blob: 'unsafe-inline' 'unsafe-eval';' was delivered via a <meta> element outside the document's <head>, which is disallowed. The policy has been ignored.

The <meta> tag is getting generated within the <body>

My mobile config file has

` App.accessRule("");
App.accessRule("blob:
");

Config.xml has

<access origin="*://mydomain.com"/> <access origin="*"/> <access origin="blob:*"/>

Any pointers would be really helpful