Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' yandex.st pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://yastatic.net site.yandex.net userapi.com https://vk.com vk.com https://wprp.zemanta.com https://graph.facebook.com connect.facebook.net apis.google.com https://cdn.api.twitter.com *.yandex.ru; img-src * data: ; style-src 'self' 'unsafe-inline' fonts.googleapis.com; frame-src https://googleads.g.doubleclick.net googleads.g.doubleclick.net yastatic.net https://vk.com vk.com *.facebook.com www.youtube.com www.youtube-nocookie.com; connect-src 'self' *.yandex.ru; object-src pagead2.googlesyndication.com mnogo-reshebnikov.com |