| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' z1.kz www.optomtovar.ru *.yandex.ru *.yandex.net vk.com https://apis.google.com *.google-analytics.com *.googlesyndication.com https://*.googlesyndication.com www.gstatic.com https://plusone.google.com https://platform.twitter.com platform.twitter.com www.liveinternet.ru ajax.googleapis.com; object-src 'self' z1.kz; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' z1.kz *.gstatic.com *.google-analytics.com *.yandex.ru ajax.googleapis.com vk.com *.yandex.ru *.yandex.net counter.yadro.ru www.webmoney.ru data:; media-src 'none'; frame-src 'self' *.yandex.ru yandex.sc www.google.com https://*.doubleclick.net *.doubleclick.net https://login.vk.com https://vk.com vk.com platform.twitter.com https://*.google.com https://platform.twitter.com *.youtube.com https://*.youtube.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' z1.kz ajax.googleapis.com mc.yandex.ru |