| Content-Security-Policy | default-src 'self' *.jeleziaka.ru jeleziaka.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' counter.yadro.ru http://c.hit.ua https://yandex.ru https://*.yandex.ru *.yandex.ru yandex.st userapi.com https://*.google-analytics.com *.google-analytics.com https://*.googlesyndication.com *.googlesyndication.com https://*.doubleclick.net *.doubleclick.net *.gstatic.com gstatic.com https://*.gstatic.com https://gstatic.com *.liveinternet.ru https://*.googleapis.com *.googleapis.com https://graph.facebook.com https://vk.com https://cdn.api.twitter.com http://connect.ok.ru http://connect.mail.ru https://*.google.com *.google.com https://*.google.ru *.google.ru https://*.yandex.net *.yandex.net https://yastatic.net yastatic.net; connect-src 'self' mc.yandex.ru https://translate.googleapis.com https://*.google-analytics.com *.google-analytics.com; img-src 'self' data: counter.yadro.ru http://c.hit.ua vk.com https://*.yandex.net *.yandex.net *.yandex.ru https://*.yandex.ru *.googlesyndication.com https://*.googlesyndication.com https://*.google-analytics.com *.google-analytics.com *.liveinternet.ru https://*.google.com *.google.com https://*.maps.yandex.net https://yastatic.net yastatic.net https://*.doubleclick.net *.doubleclick.net https://*.googleapis.com *.googleapis.com *.gstatic.com https://*.gstatic.com https://*.google.ru *.google.ru; style-src 'self' 'unsafe-inline' *.yandex.ru https://*.yandex.ru https://yastatic.net yastatic.net *.googleapis.com *.gstatic.com https://*.googleapis.com https://*.gstatic.com; object-src 'self' *.gstatic.com https://*.gstatic.com https://googleads.g.doubleclick.net googleads.g.doubleclick.net *.yandex.ru https://*.yandex.ru https://*.google.com *.google.com; frame-src 'self' vk.com *.vk.com https://vk.com https://*.vk.com *.doubleclick.net https://*.doubleclick.net *.yandex.ru *.youtube.com https://yastatic.net yastatic.net *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.google.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://*.google.com https://*.google.ru *.google.ru *.googleadservices.com https://*.googleadservices.com; font-src 'self' https://*.googleapis.com *.googleapis.com https://*.gstatic.com *.gstatic.com https://*.yandex.ru *.yandex.ru data:; |