| Content-Security-Policy | default-src 'self';style-src 'unsafe-inline' *;child-src http://vk.com https://vk.com https://login.vk.com https://apis.google.com https://accounts.google.com http://www.google-analytics.com http://yastatic.net https://yastatic.net ;img-src * data:;media-src *;font-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com http://www.google-analytics.com https://apis.google.com apis.google.com platform.twitter.com http://ajax.googleapis.com http://vk.com https://vk.com https://login.vk.com http://yastatic.net https://yastatic.net http://yandex.st https://yandex.st http://mc.yandex.ru https://mc.yandex.ru http://yandex.ru https://yandex.ru ; |