Server | nginx |
Content-Type | text/html; charset=utf-8 |
Transfer-Encoding | chunked |
Connection | keep-alive |
X-Powered-By | PHP/5.3.3-7+squeeze27 |
Cache-Control | post-check=0, pre-check=0, max-age=0 |
Pragma | no-cache |
Expries | Mon, 05 Nov 2012 04:31:56 GMT |
Content-Encoding | gzip |
Vary | Accept-Encoding |
Last-Modified | Tue, 03 Nov 2015 06:34:33 GMT |
X-XSS-Protection | 1; mode=block |
X-Frame-Options | DENY |
Content-Security-Policy | default-src 'self' glavrecept.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.google.com https://*.google.com http://*.twitter.com https://*.twitter.com http://*.facebook.net https://*.facebook.net http://userapi.com https://userapi.com http://yandex.st https://yandex.st http://*.google-analytics.com tps://*.google-analytics.com http://*.yandex.ru https://*.yandex.ru http://*.googlesyndication.com https://*.googlesyndication.com http://yastatic.net https://yastatic.net; frame-src 'self' http://yastatic.net https://yastatic.net http://*.doubleclick.net https://*.doubleclick.net http://*.yandex.ru https://*.yandex.r ject-src 'self' *; img-src 'self' * data:; font-src 'self' * data:; connect-src 'self' *; style-src 'unsafe-inline' 'unsafe-eval' 'self' *; report-uri http://xweb.u/csp.php |