| Content-Security-Policy | report-uri ./?content-security-policy=report-uri; default-src 'self'; img-src data: *; script-src *.google.com *.googlesyndication.com *.googleapis.com *.google-analytics.com *.gstatic.com *.addthis.com *.uptolike.com *.yandex.ru https://*.googlesyndication.com https://*.googleapis.com https://*.doubleclick.net https://*.google-analytics.com https://*.yandex.ru *.disqus.com m.addthisedge.com *.disquscdn.com 'unsafe-inline' 'unsafe-eval' 'self'; frame-src *.google.ru *.google.com *.youtube.com *.amazon-adsystem.com *.doubleclick.net *.addthis.com *.uptolike.com https://*.googlesyndication.com https://*.doubleclick.net https://*.youtube.com disqus.com 'self'; object-src *.google.com *.youtube.com *.googlesyndication.com https://*.youtube.com 'self'; connect-src https://csi.gstatic.com *.googleapis.com *.google.com *.yandex.ru *.addthis.com *.uptolike.com https://*.googleapis.com https://*.doubleclick.net https://*.google-analytics.com https://*.yandex.ru *.disqus.com *.disquscdn.com 'self'; style-src *.google.com https://*.googleapis.com https://*.gstatic.com 'unsafe-inline' 'self'; media-src *; font-src *; form-action *.google.com 'self'; |