| Content-Security-Policy | default-src 'self';style-src 'unsafe-inline' *;frame-src 'self' http://player.vimeo.com https://mc.yandex.ru http://log.xoalt.com http://youtube.com http://www.youtube.com ;connect-src http://log.xoalt.com ;img-src * data:;media-src *;font-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' http://sync.xoalt.com http://log.xoalt.com http://ad.adsniper.ru http://sync3.adsniper.ru http://ajax.googleapis.com http://ajax.aspnetcdn.com http://dobrotds.com http://st.dobrotds.com http://*.dobrotds.com dobrotds.com http://top-fwz1.mail.ru http://www.youtube.com http://youtube.com http://st.amazonkashtan.com http://vkontore.m2corp.ru http://fpdownload2.macromedia.com http://vk.com https://mc.yandex.ru/ http://resports.zdorov.pro http://api-maps.yandex.ru; report-uri http://ctrif.com/csp.php |