| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' arhangel.ru *.adlabs.ru *.luxadv.com luxadv.com *.yandex.net *.googleapis.com *.google.com yastatic.net connect.ok.ru go.youlamedia.com *.gstatic.com yandex.st *.googlesyndication.com vk.com *.mail.ru *.yandex.ru www.google-analytics.com https://www.google-analytics.com top-fwz1.mail.ru; object-src 'self' *.googlesyndication.com *.gstatic.com; style-src 'self' 'unsafe-inline' arhangel.ru yastatic.net *.google.com fonts.googleapis.com; font-src 'self' 'unsafe-inline' arhangel.ru fonts.gstatic.com; img-src 'self' data: arhangel.ru stat.adlabs.ru dumedia.ad.admitad.com ad.dumedia.ru *.luxcdn.com rtb.rtcdn.ru imrk.net sync.madnet.ru *.adriver.ru track.recreativ.ru *.luxup.ru *.cubo.ru luxcdn.com www.tns-counter.ru *.yandex.net *.googleapis.com *.google.com counter.yadro.ru *.googlesyndication.com *.doubleclick.net go.youlamedia.com vk.com yastatic.net mc.yandex.ru www.google-analytics.com https://www.google-analytics.com; frame-src 'self' arhangel.ru imrk.net awaps.yandex.ru *.google.com yastatic.net connect.mail.ru *.doubleclick.net vk.com *.vk.com go.youlamedia.com connect.ok.ru; media-src 'self'; connect-src 'self' mc.yandex.ru *.gstatic.com |