I have a few links in one of the views in my app for:
On an iPhone which I use
You have to add gap: in the default-src of your Content-Security-Policy meta tag in your index.html.
gap:
default-src
Content-Security-Policy
index.html
This is because on iOS 10 Apple got stricter with the CSP, and * doesn't cover some things
*