| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' counter.rambler.ru my2.imgsmail.ru *.yandex.ru yandex.st yastatic.net vk.com cdn.connect.mail.ru www.google-analytics.com https://www.google-analytics.com ajax.googleapis.com pagead2.googlesyndication.com *.gstatic.com googleads.g.doubleclick.net; object-src 'self' *.ytimg.com *.youtube.com *.googlevideo.com googleads.g.doubleclick.net pagead2.googlesyndication.com *.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: *.gravatar.com *.yandex.net *.yandex.ru counter.rambler.ru vk.com yastatic.net www.liveinternet.ru counter.yadro.ru *.yandex.ru www.google-analytics.com https://www.google-analytics.com pagead2.googlesyndication.com *.gstatic.com *.ytimg.com; media-src 'self'; frame-src 'self' *.yandex.ru connect.mail.ru googleads.g.doubleclick.net vk.com *.youtube.com; font-src 'self' data: *.gstatic.com; connect-src 'self' *.yandex.ru *.gstatic.com *.googlevideo.com |