adding cordova-plugin-whitelist and the appropriate access tags in config.xml doesn’t solve the issue.
--------- EDIT -------------------
Remove meta tag for CSP, added lines in config.xml seems to work fine now:
<access origin="*"/> <allow-intent href="*"/> <allow-navigation href="*"/>