| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.www.sait-o-runah.ru *.googlesyndication.com http://googlesyndication.com/ https://*.googlesyndication.com http://*.googleapis.com/ https://*.googleapis.com http://*.gstatic.com/ https://*.gstatic.com http://doubleclick.net/ https://*.doubleclick.net http://gstatic.com/ https://gstatic.com https://*.googlesyndication.com *.gstatic.com *.google.com *.doubleclick.net google.com *.googleapis.com www.gstatic.com yandex.st an.yandex.ru www.youtube.com vk.com cdn.connect.mail.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com yastatic.net; object-src 'self' www.gstatic.com yastatic.net *.googlesyndication.com *.doubleclick.net https://*.googlesyndication.com *.gstatic.com *.google.com google.com *.googleapis.com; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com:* *.googleapis.com *.gstatic.com yastatic.net https://*.googleapis.com http://googleapis.com https://*.gstatic.com http://gstatic.com *.googlesyndication.com *.doubleclick.net https://*.googlesyndication.com *.gstatic.com *.google.com google.com *.googleapis.com; img-src 'self' data: 0.gravatar.com http://0.gravatar.com/ 1.gravatar.com *.googlesyndication.com https://*.googlesyndication.com *.gstatic.com *.google.com googleadservices.com *.doubleclick.net google.com *.googleapis.com http://1.gravatar.com/ an.yandex.ru/count http://an.yandex.ru/count/ favicon.yandex.net http://favicon.yandex.net avatars-fast.yandex.net http://avatars-fast.yandex.net/ vk.com yastatic.net www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com; media-src 'self' yastatic.net *.googlesyndication.com *.doubleclick.net googleadservices.com https://*.googlesyndication.com *.gstatic.com *.google.com google.com *.googleapis.com ; frame-src 'self' yastatic.net http://yastatic.net/ connect.mail.ru http://googlesyndication.com/ https://*.googlesyndication.com http://*.googleapis.com/ https://*.googleapis.com http://*.gstatic.com/ https://*.gstatic.com http://doubleclick.net/ https://*.doubleclick.net http://gstatic.com/ https://gstatic.com an.yandex.ru googleadservices.com *.doubleclick.net *.googlesyndication.com https://*.googlesyndication.com *.gstatic.com *.google.com google.com *.googleapis.com www.youtube.com googleads.g.doubleclick.net vk.com ; font-src 'self' data: http://fonts.gstatic.com:* https://*.googleapis.com http://googleapis.com https://*.gstatic.com http://gstatic.com yastatic.net; connect-src 'self' mc.yandex.ru *.googlesyndication.com googleadservices.com *.doubleclick.net https://*.googlesyndication.com *.gstatic.com *.google.com google.com *.googleapis.com *.gstatic.com |