| Content-Security-Policy | default-src 'self'; img-src 'self' data: *.google-analytics.com google-analytics.com *.googlesyndication.com *.2mdn.net counter.yadro.ru *.yandex.ru https://*.yandex.ru *.yandex.net yastatic.net *.acint.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com yastatic.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com google-analytics.com *.googlesyndication.com https://*.googlesyndication.com *.gstatic.com *.yandex.ru https://*.yandex.ru *.yandex.net yandex.com yandex.st yastatic.net *.acint.net; object-src 'self' *.googlesyndication.com; connect-src 'self' *.google-analytics.com google-analytics.com *.yandex.ru https://*.yandex.ru; frame-src 'self' googleads.g.doubleclick.net https://googleads.g.doubleclick.net *.googleadservices.com yandex.ru *.yandex.ru yandex.ua; font-src 'self' data: *.gstatic.com *.googleapis.com; report-uri /csp-report.php; |