| Content-Security-Policy | default-src 'self'; style-src 'unsafe-inline' *; frame-src *; img-src * data:; media-src *; font-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://jmyvideo.ru http://mp69.co https://mp-https.info https://mobtop.com http://mobtop.ru http://yandex.st https://yandex.st http://*.google.com https://*.google.com http://*.googleapis.com https://*.googleapis.com ; connect-src 'self' http://jmyvideo.ru http://mp69.co https://mp-https.info https://mobtop.com http://mobtop.ru http://yandex.st https://yandex.st http://*.google.com https://*.google.com http://*.googleapis.com https://*.googleapis.com ; report-uri /csp2.php |