Quick patch for restbase integration with local mobileapps

Change-Id: Ie6e9f62218e97a4142ea746da1303fc941e39a73

config.dev.yaml

@@ -46,15 +46,7 @@ services:
       # content for the CSP headers
       # csp: false  # uncomment this line to disable sending them
       # CSP for mobile-html
-      mobile_html_csp: "default-src 'none';
-        connect-src https://*.wikipedia.org 'self';
-        media-src upload.wikimedia.org 'self';
-        img-src *.wikimedia.org wikimedia.org *.wikipedia.org wikipedia.org 'self' data:;
-        object-src 'none';
-        script-src 'self' 'unsafe-inline';
-        style-src *.wikipedia.org 'self' 'unsafe-inline';
-        frame-ancestors 'self'
-        "
+      mobile_html_csp: "default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-dynamic'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';"
       # URL of the outbound proxy to use (complete with protocol)
       # proxy: http://my.proxy.org:8080
       # the list of domains for which not to use the proxy defined above
@@ -75,8 +67,8 @@ services:
       user_agent: WMF Mobile Content Service dev
       # REST API base URIs
       use_request_host: true
-      mobile_html_rest_api_base_uri: '//{{host}}/api/v1/'
-      mobile_html_local_rest_api_base_uri_template: '//{{host}}/{{domain}}/v1/'
+      mobile_html_rest_api_base_uri: 'http://{{host}}/api/v1/'
+      mobile_html_local_rest_api_base_uri_template: 'http://{{host}}/{{domain}}/v1/'
       # max JSON POST body size limit
       # max_body_size: 100kb
       # the template used for contacting the MW API