| Content-Security-Policy | default-src 'self' http://*.ytimg.com https://*.ytimg.com http://*.2mdn.net https://*.2mdn.net http://*.googlevideo.com https://*.googlevideo.com http://*.googleapis.com http://*.google-analytics.com http://*.yandex.ru https://*.yandex.ru http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.youtube.com https://*.youtube.com;style-src 'unsafe-inline' *;frame-src 'self' http://s.ytimg.com https://*.ytimg.com http://*.2mdn.net https://*.2mdn.net http://*.googlevideo.com https://*.googlevideo.com http://*.googleapis.com http://*.google-analytics.com http://*.yandex.ru https://*.yandex.ru http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.youtube.com https://*.youtube.com;img-src * data:;media-src *;font-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.jquery.com http://yandex.st http://s.ytimg.com https://*.ytimg.com http://*.2mdn.net https://*.2mdn.net http://*.googlevideo.com https://*.googlevideo.com http://*.googleapis.com http://*.google-analytics.com http://*.yandex.ru https://*.yandex.ru http://*.googlesyndication.com https://*.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net http://*.youtube.com https://*.youtube.com http://*.marketgid.com/; report-uri /csp.php |