| Content-Security-Policy | default-src 'self' https://cdn.admitad.com;style-src 'unsafe-inline' *;frame-src 'self' https://apis.google.com https://accounts.google.com http://track.dumedia.ru https://www.youtube.com http://vk.com http://platform.twitter.com http://www.youtube.com http://static.ak.facebook.com https://s-static.ak.facebook.com http://www.facebook.com https://www.facebook.com;img-src * data:;media-src *;font-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' http://ajax.googleapis.com http://vk.com https://apis.google.com http://ad.admitad.com http://counter.rambler.ru http://cdn.dumedia.ru http://ad.dumedia.ru http://share.pluso.ru http://platform.twitter.com http://kitbit.net http://t.insigit.com http://connect.facebook.net; report-uri /csp.php |