content security policy directive: img-src * 'self' data: https:"

Questions
1

I’m trying to get dynamic image from my server and I got these errors . First I was getting

Content Security Policy directive: "default-src *". Note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback.

My content was:
<meta http-equiv="Content-Security-Policy" content="default-src *; 'self' 'unsafe-inline' 'unsafe-eval' data: gap: content:">

Then I searched on stackoverflow and changed my content to:

<meta http-equiv="Content-Security-Policy" content="default-src *;
   img-src * 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *;
   style-src  'self' 'unsafe-inline' *">

violates the following Content Security Policy directive: "img-src * 'self' data: https:".

2

i use it like this:

img-src https://www.MY-SERVER.com 'self' data:;