| Content-Security-Policy | default-src 'self' bookfi.org *.bookfi.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' bookfi.org *.bookfi.org http://litres.ru *.litres.ru https://yandex.st http://yandex.st https://*.amazon-adsystem.com http://*.amazon-adsystem.com https://*.amazon.com http://*.amazon.com https://*.assoc-amazon.com http://*.assoc-amazon.com http://*.hit.ua http://userapi.com http://js.maxmind.com https://*.cackle.me http://*.cackle.me *.am15.net https://*.am15.net *.mmi.bemobile.ua *.c8.net.ua https://*.c8.net.ua http://*.mobisla.com https://*.mobisla.com http://*.pushnative.com https://*.pushnative.com www.acint.net *.adriver.ru https://*.adriver.ru *.admixer.net https://*.admixer.net *.advon.info *.advon.net *.smartbn.ru https://*.smartbn.ru http://vacancy.kiev.ua *.topadvert.ru https://*.topadvert.ru *.advertur.ru https://*.advertur.ru http://recreativ.ru https://recreativ.ru *.vk.com https://*.vk.com vk.com https://vk.com connect.facebook.net https://connect.facebook.net top-fwz1.mail.ru counter.yadro.ru www.google.com advapi.ru an.yandex.ru mc.yandex.ru https://mc.yandex.ru https://an.yandex.ru cse.google.com http://10.20.2.42:15871 *.amazonaws.com *.ytimg.com http://*.whisla.com https://*.googleapis.com https://*.google.com *.google.com *.gstatic.com https://*.gstatic.com ssl.google-analytics.com www.google-analytics.com cse.google.com https://*.google.com http://*.google.com https://www.google-analytics.com http://*.googlesyndication.com https://*.googlesyndication.com *.googleapis.com *.doubleclick.net http://hepartners.ru https://*.jquery.com http://*.jquery.com; object-src 'self' bookfi.info *.bookfi.info dl.lux.bookfi.org http://*.ytimg.com http://*.c8.net.ua https://*.c8.net.ua *.adriver.ru https://*.adriver.ru *.admixer.net https://*.admixer.net *.advertur.ru https://*.advertur.ru http://recreativ.ru https://recreativ.ru *.macromedia.com *.adobe.com connect.facebook.net https://connect.facebook.net https://*.adobe.com https://*.googleapis.com *.gstatic.com mc.yandex.ru https://mc.yandex.ru *.googleapis.com *.vk.com https://*.vk.com vk.com https://vk.com mc.yandex.ru https://mc.yandex.ru;style-src 'self' 'unsafe-inline' *.vk.com https://*.vk.com vk.com https://vk.com https://*.cackle.me http://*.cackle.me https://*.assoc-amazon.com http://*.assoc-amazon.com http://*.jquery.com http://recreativ.ru https://recreativ.ru bookfi.org *.bookfi.org https://* cse.google.com www.google.com http://netdna.bootstrapcdn.com fonts.googleapis.com *.googleapis.com; img-src *; media-src 'self' * mediastream: *; frame-src 'self' 'unsafe-eval' bookfi.org *.bookfi.org bookfi.info *.bookfi.info http://*.amazon-adsystem.com https://*.amazon-adsystem.com https://*.images-amazon.com http://*.images-amazon.com https://*.yandex.ru http://*.yandex.ru https://*.cackle.me http://*.cackle.me https://*.facebook.com *.facebook.com blocking.stat *.yahoo.com *.am15.net https://*.am15.net *.mmi.bemobile.ua *.c8.net.ua https://*.c8.net.ua *.adriver.ru https://*.adriver.ru *.admixer.net https://*.admixer.net *.advon.info *.advon.net http://vacancy.kiev.ua vk.com *.hubrus.com www.google.com cse.google.com http://yandex.sc http://www.youtube.com https://www.youtube.com http://*.googlesyndication.com *.doubleclick.net https://*.doubleclick.net https://*.google.com http://*.google.com top-fwz1.mail.ru counter.yadro.ru *.googleapis.com mc.yandex.ru https://mc.yandex.ru *.vk.com https://*.vk.com vk.com https://vk.com http://hepartners.ru; font-src 'self' bookfi.org *.bookfi.org *.googleapis.com http://*.bootstrapcdn.com https://fonts.gstatic.com http://fonts.gstatic.com; connect-src 'self' https://www.youtube.com *.googlevideo.com https://*.gstatic.com *.google-analytics.com https://*.yandex.ru http://*.yandex.ru *.mmi.bemobile.ua *.admixer.net https://*.admixer.net; |