| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.adriver.ru connect.ok.ru *.ytimg.com *.youtube.com *.gstatic.com *.republer.com *.advertur.ru *.kavanga.ru *.targetix.net *.bidswitch.net *.dutrmedi.ru *.dumedia.ru *.admitad.com *.100im.net *.sociomantic.com *.am15.net *.betweendigital.com *.whisla.com *.intencysrv.com *.begun.ru *.bidswitch.net *.r24-tech.com *.ghmedia.ru *.smaclick.com *.wbunder.com advombat.ru jsc.dt00.net *.mail.ru *.facetz.net *.exebid.ru *.adhigh.net *.hubrus.com *.doubleclick.net *.acint.net *.datamind.ru *.gstatic.com https://*.gstatic.com https://*.doubleclick.net https://a.disquscdn.com *.yandex.st https://connect.ok.ru www.odnoklassniki.ru *.disqus.com *.googlesyndication.com blackboot.ru code.jquery.com *.betweendigital.com *.googleapis.com userapi.com https://vk.com vk.com https://wprp.zemanta.com https://graph.facebook.com connect.facebook.net apis.google.com https://cdn.api.twitter.com *.yandex.ru; img-src * data: ; style-src 'self' 'unsafe-inline' fonts.googleapis.com; frame-src *.advertur.ru *.kavanga.ru *.targetix.net *.bidswitch.net *.dutrmedi.ru *.dumedia.ru *.admitad.com *.100im.net *.sociomantic.com *.am15.net *.betweendigital.com *.whisla.com *.intencysrv.com *.begun.ru *.bidswitch.net *.r24-tech.com *.ghmedia.ru *.smaclick.com *.wbunder.com advombat.ru jsc.dt00.net *.mail.ru *.facetz.net *.exebid.ru *.adhigh.net *.hubrus.com *.doubleclick.net *.acint.net *.datamind.ru *.gstatic.com *.datamind.ru *.kavanga.ru www.acint.net disqus.com *.intencysrv.com *.doubleclick.net *.betweendigital.com vk.com *.facebook.com www.youtube.com www.youtube-nocookie.com; connect-src 'self' https://www.youtube.com *.yandex.ru; object-src 'self' https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com http://*.youtube.com ytimg.com *.ytimg.com http://ytimg.com https://ytimg.com https://*.ytimg.com googlevideo.com *.googlevideo.com https://googlevideo.com https://*.googlevideo.com doubleclick.net *.doubleclick.net https://doubleclick.net https://*.doubleclick.net; font-src 'self' *.gstatic.com data: |