| Content-Security-Policy | default-src 'self' http://googleads.g.doubleclick.net http://pagead2.googlesyndication.com/ https://pagead2.googlesyndication.com/ http://www.google.com/ https://*.yandex.ru http://*.yandex.ru https://*.yandex.net http://*.yandex.net;style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://fonts.googleapis.com https://*.vk.com/ http://maxcdn.bootstrapcdn.com http://maxcdn.bootstrapcdn.com;frame-src 'self' http://www.youtube.com https://www.youtube.com http://www.facebook.com/ https://www.facebook.com/ http://static.ak.facebook.com/ https://s-static.ak.facebook.com/ https://connect.ok.ru/ http://*.vk.com/ https://*.vk.com/ https://*.doubleclick.net/ http://googleads.g.doubleclick.net/ http://platform.twitter.com/ http://pagead2.googlesyndication.com/ https://pagead2.googlesyndication.com/ https://*.metabar.ru/ http://*.1tv.ru;img-src 'self' 'unsafe-inline' http://www.google-analytics.com https://www.google-analytics.com http://*.gravatar.com https://*.gravatar.com http://counter.yadro.ru/ http://*.vk.com/ https://*.vk.com/ https://syndication.twitter.com/ https://pagead2.googlesyndication.com/ http://pagead2.googlesyndication.com/ http://*.actionteaser.ru https://*.actionteaser.ru http://*.yandex.ru https://*.yandex.ru http://*.yandex.net https://*.yandex.net data: ; media-src 'self';font-src 'self' http://*.gstatic.com https://*.gstatic.com http://maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com data: ;script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google-analytics.com https://www.google-analytics.com http://connect.ok.ru https://connect.ok.ru http://www.odnoklassniki.ru https://www.odnoklassniki.ru http://cdn.api.twitter.com https://cdn.api.twitter.com http://graph.facebook.com https://graph.facebook.com https://ajax.googleapis.com http://ajax.googleapis.com https://maxcdn.bootstrapcdn.com http://maxcdn.bootstrapcdn.com https://*.vk.com http://*.vk.com https://vk.com http://vk.com http://platform.twitter.com/ https://cdn.syndication.twitter.com/ http://pagead2.googlesyndication.com/ https://pagead2.googlesyndication.com/ https://connect.facebook.net/ http://connect.facebook.net/ http://v.actionteaser.ru http://*.yandex.ru https://*.yandex.ru https://*.metabar.ru/; connect-src 'self' http://*.google-analytics.com https://*.google-analytics.com https://*.yandex.ru http://*.yandex.ru; report-uri https://477d32a48a69be69708150e451429a6e.report-uri.io/r/default/csp/enforce |