--- www/index.html	2016-01-10 02:46:31.000000000 +0300
+++ www/index.html	2016-01-10 02:46:05.000000000 +0300
@@ -44,6 +44,7 @@
             </div>
         </div>
         <script type="text/javascript" src="cordova.js"></script>
         <script type="text/javascript" src="js/index.js"></script>
+        <script type="text/javascript" src="js/apppreferences-test.js"></script>
     </body>
 </html>
--- www/js/apppreferences-test.js	2016-01-11 01:09:18.000000000 +0300
+++ www/js/apppreferences-test.js	2016-01-11 01:36:51.000000000 +0300
@@ -157,3 +157,4 @@
 		oReq.send();
 	});
 }
+document.addEventListener("deviceready", testPluginAndCallback, false);
--- www/index.html	2016-01-13 18:04:36.000000000 +0300
+++ www/index.html	2016-01-13 18:12:50.000000000 +0300
@@ -28,7 +28,7 @@
             * Disables use of inline scripts in order to mitigate risk of XSS vulnerabilities. To change this:
                 * Enable inline JS: add 'unsafe-inline' to default-src
         -->
-        <meta http-equiv="Content-Security-Policy" content="default-src 'self' data: gap: https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; media-src *">
+        <meta http-equiv="Content-Security-Policy" content="default-src 'self' data: gap: https://ssl.gstatic.com 'unsafe-eval'; style-src 'self' 'unsafe-inline'; media-src *; connect-src *">
         <meta name="format-detection" content="telephone=no">
         <meta name="msapplication-tap-highlight" content="no">
         <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width">