Content-Security-Policy | default-src 'self' data: *.yadro.ru fonts.gstatic.com yandex.ru *.yandex.ru google-analytics.com *.google-analytics.com yastatic.net www.facebook.com s1block.com *.s1block.com sw1block.com *.sw1block.com actionteaser.ru *.actionteaser.ru marketgid.com *.marketgid.com tovarro.com *.tovarro.com mirs.com *.mirs.com criteo.com *.criteo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.yadro.ru fonts.gstatic.com yandex.ru *.yandex.ru google-analytics.com *.google-analytics.com yastatic.net www.facebook.com s1block.com *.s1block.com sw1block.com *.sw1block.com actionteaser.ru *.actionteaser.ru marketgid.com *.marketgid.com tovarro.com *.tovarro.com mirs.com *.mirs.com criteo.com *.criteo.com; style-src 'self' 'unsafe-inline'; |