Server | nginx/1.4.1 |
Content-Type | text/html; charset=utf-8 |
Connection | keep-alive |
X-Powered-By | PHP/5.4.16 |
P3P | CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" |
Expires | max-age=29030400, public |
Last-Modified | Fri, 06 Nov 2015 03:08:13 GMT |
Cache-Control | post-check=0, pre-check=0 |
Pragma | no-cache |
Vary | Accept-Encoding |
Content-Encoding | gzip |
Content-Security-Policy | default-src 'self' mirsovet.ru;script-src 'self' 'unsafe-inline' 'unsafe-eval' mirsovet.ru advapi.ru http://10.20.2.42:15871 *.akamaihd.net *.amazonaws.com *.ytimg.com http://*.whisla.com *.mixmarket.biz http://www.liveinternet.ru https://*.googleapis.com http://*.rambler.ru http://*.mail.ru https://*.google.com *.google.com *.gstatic.com https://*.gstatic.com www.google-analytics.com https://www.google-analytics.com *.yandex.ru yandex.st http://*.googlesyndication.com https://*.googlesyndication.com *.googleapis.com *.doubleclick.net;object-src 'self' http://*.ytimg.com *.macromedia.com *.adobe.com https://*.adobe.com https://*.googleapis.com http://www.youtube.com http://www.liveinternet.ru https://www.youtube.com *.gstatic.com;style-src 'self' 'unsafe-inline' mirsovet.ru https://* http://netdna.bootstrapcdn.com;img-src * data: mirsovet.ru; media-src 'self' * mediastream: *;frame-src 'self' 'unsafe-eval' blocking.stat *.yahoo.com *.hubrus.com http://*.mail.ru http://*.rambler.ru http://yandex.sc http://www.youtube.com https://www.youtube.com *.yandex.ru yandex.st http://*.googlesyndication.com *.doubleclick.net https://*.doubleclick.net https://*.google.com *.mirsovet.ru *.mixmarket.biz http://*.google.com;font-src 'self' mirsovet.ru *;connect-src 'self' https://www.youtube.com *.googlevideo.com https://*.gstatic.com;report-uri http://mirsovet.ru/csp.php |