| Content-Security-Policy | default-src 'self';style-src 'unsafe-inline' *;frame-src 'self' http://*.2mdn.net http://*.yandex.ru https://*.yandex.ru https://yastatic.net http://yastatic.net http://*.yandex.net https://*.yandex.net http://yandex.st https://yandex.st http://yandexadexchange.net/ https://yandexadexchange.net/ http://youtube.com https://youtube.com https://*.youtube.com http://*.youtube.com https://*.googlevideo.com http://*.googlevideo.com https://googlevideo.com http://googlevideo.com http://vk.com https://vk.com https://api.vk.com http://api.vk.com http://*.googleapis.com https://*.googleapis.com https://google.com http://google.com https://*.google.com http://*.google.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.gstatic.com https://*.gstatic.com;img-src * data:;media-src *;font-src * data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.googleapis.com https://*.googleapis.com https://google.com http://google.com https://*.google.com http://*.google.com http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.gstatic.com https://*.gstatic.com http://vk.com https://vk.com https://api.vk.com http://api.vk.com http://youtube.com https://youtube.com https://*.youtube.com http://*.youtube.com https://*.googlevideo.com http://*.googlevideo.com https://googlevideo.com http://googlevideo.com http://*.yandex.ru https://*.yandex.ru https://yastatic.net http://yastatic.net http://*.yandex.net https://*.yandex.net http://yandex.st https://yandex.st http://yandexadexchange.net https://yandexadexchange.net http://*.2mdn.net; connect-src *; object-src *;report-uri /csp.php |