Content-Security-Policy | default-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' 'nonce-2TYAMRPRaKG5vVYu3RTwLQ==' mc.yandex.ru social.yandex.ru yastatic.net; style-src 'unsafe-inline' mc.yandex.ru yastatic.net; img-src 'self' data: avatars.yandex.net avatars.mds.yandex.net avatars.mdst.yandex.net mc.yandex.ru yastatic.net; connect-src 'self' mc.yandex.ru; frame-src www.youtube.com; font-src yastatic.net; report-uri https://csp.yandex.net/csp?from=promo-catboost-2017&yandex_login=undefined&yandexuid=undefined; |