I’m trying to inject a script to a an external page from an android Cordova app, but since the external page has a content security policy against eval, I can’t use the following script.

const innerWindow = cordova.InAppBrowser.open("htpps://x.com", "_blank");
innerWindow.addEventLisrener("loadstop", ()=>innerWindow.executeScript({code:"alert(2)"}))

Is there a way to override the content security policy of the external page, to allow the above script?

I’ve tried using file instead of code, but then a different policy blocks the loading of the extra file.