I have a Tizen widget wich pointed to my hosted app URL. 

I’m using this config to whitelist some domains that I use in my app:

However, this doesn’t seem to work in Samsung 2020 TV, and Samsung advises me to use Content-Security-Policy instead.
So I follow the advice and use this in my config instead:

This works wonder in Samsung 2020, but now my app opened in a windowed browser in older Samsung tvs.

What is the solution that’s compatible for all Samsung TVs?