It could be greate if the app serve protocol meteor:// be user configurable, with a default of meteor:// probably via setting.json variable.

Scenario

A scenario affecting this is where user has Iframes in the app , and the Iframes are CSP (Content-Security-Policy) configured to allow subset of origin