content-security-policy | default-src 'self'; style-src 'self' 'unsafe-inline' https://*.googleapis.com; script-src 'self' 'unsafe-inline' https://*.google-analytics.com https://*.facebook.net https://maps.googleapis.com; img-src 'self' https://*.google-analytics.com https://*.g.doubleclick.net https://*.google.com https://*.google.com.ua https://*.gstatic.com https://*.googleapis.com https://*.facebook.com; font-src https://*.googleapis.com https://*.gstatic.com https://*.facebook.com; frame-src http://*.facebook.com |