| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com https://code.jquery.com mc.yandex.ru https://mc.yandex.ru cdn.jsdelivr.net https://cdn.jsdelivr.net ymetrica.com https://ymetrica.com www.google-analytics.com https://www.google-analytics.com *.gstatic.com https://*.gstatic.com *.googleapis.com https://*.googleapis.com yastatic.net https://yastatic.net; img-src 'self' data: s2.nudemir.com https://s2.nudemir.com counter.yadro.ru https://counter.yadro.ru mc.yandex.ru https://mc.yandex.ru cdn.jsdelivr.net https://cdn.jsdelivr.net ymetrica.com https://ymetrica.com mc.webvisor.org https://mc.webvisor.org www.google-analytics.com https://www.google-analytics.com *.gstatic.com https://*.gstatic.com *.googleapis.com https://*.googleapis.com yastatic.net https://yastatic.net *.bongacams.com https://*.bongacams.com; style-src 'self' 'unsafe-inline' *.googleapis.com https://*.googleapis.com; font-src 'self' data: *.gstatic.com https://*.gstatic.com; media-src 'self' s2.nudemir.com https://s2.nudemir.com ssl-promo.bongacams.com https://ssl-promo.bongacams.com *.hgfsdzfs.com https://*.hgfsdzfs.com; connect-src 'self' wss://mirsexy.com:2345 mc.yandex.ru https://mc.yandex.ru cdn.jsdelivr.net https://cdn.jsdelivr.net ymetrica.com https://ymetrica.com hgfsdzfs.com https://hgfsdzfs.com; frame-src 'self' chat.mirsexy.com https://chat.mirsexy.com; object-src 'self' s2.nudemir.com https://s2.nudemir.com; report-uri https://mirsexy.report-uri.io/r/default/csp/enforce; |