| Content-Security-Policy | default-src 'self' *.obogatim.ru *.rcraduga.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.obogatim.ru *.rcraduga.ru img.yandex.net https://img.yandex.net clck.yandex.ru platform.twitter.com www.google.com www.google.ru www.gstatic.com yandex.st https://yandex.st vk.com userapi.com mc.yandex.ru https://www.google-analytics.com ajax.googleapis.com; object-src 'self' www.gstatic.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' *.obogatim.ru *.rcraduga.ru; img-src 'self' data: *.obogatim.ru *.rcraduga.ru www.google.com vk.com yastatic.net https://yastatic.net counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com; media-src 'self' *.obogatim.ru *.rcraduga.ru; frame-src 'self' https://login.vk.com vk.com https://vk.com www.google.ru platform.twitter.com; font-src 'self'; connect-src 'self' *.obogatim.ru *.rcraduga.ru mc.yandex.ru *.gstatic.com |