Facebook integrates itself on my users' phones violating Content-Security-Policy

Question

I have a site. Site is used by users. I set the following Content Security Policy:

Content-Security-Policy: default-src \'none\'; style-src \'self\' \'unsafe-