| Content-Security-Policy | default-src 'self'; connect-src 'self' *.yandex.ru https://*.yandex.ru http://yandex.ru https://yandex.ru *.google-analytics.com https://*.google-analytics.com http://google-analytics.com https://google-analytics.com; font-src 'self' *.googleapis.com http://googleapis.com https://googleapis.com *.gstatic.com http://gstatic.com https://gstatic.com https://*.googleapis.com https://*.gstatic.com; frame-src 'self' *.doubleclick.net http://doubleclick.net https://doubleclick.net *.googleadservices.com http://googleadservices.com https://googleadservices.com *.googlesyndication.com http://googlesyndication.com https://googlesyndication.com *.google.com http://google.com https://google.com *.youtube.com http://youtube.com https://youtube.com https://*.doubleclick.net https://*.googleadservices.com https://*.googlesyndication.com https://*.google.com https://*.youtube.com *.yandex.ru https://*.yandex.ru http://yandex.ru https://yandex.ru https://accounts.google.com http://accounts.google.com; img-src 'self' data: *.2mdn.net http://2mdn.net https://2mdn.net *.doubleclick.net http://doubleclick.net https://doubleclick.net *.googleapis.com http://googleapis.com https://googleapis.com *.googlesyndication.com http://googlesyndication.com https://googlesyndication.com *.gstatic.com http://gstatic.com https://gstatic.com *.yadro.ru http://yadro.ru https://yadro.ru *.google-analytics.com http://google-analytics.com https://google-analytics.com *.yandex.ru http://yandex.ru https://yandex.ru *.yastatic.net http://yastatic.net https://yastatic.net *.google.com http://google.com https://google.com https://*.2mdn.net https://*.doubleclick.net https://*.googleapis.com https://*.googlesyndication.com https://*.gstatic.com https://*.yadro.ru https://*.google-analytics.com https://*.yandex.ru https://*.yastatic.net https://*.google.com *.google.ru http://google.ru https://google.ru https://*.google.ru http://yandex.net *.yandex.net https://*.yandex.net https://yandex.net; media-src 'self'; object-src 'self' googleads.g.doubleclick.net http://googleads.g.doubleclick.net https://googleads.g.doubleclick.net *.gstatic.com http://gstatic.com https://gstatic.com https://*.gstatic.com *.googlesyndication.com https://*.googlesyndication.com http://googlesyndication.com https://googlesyndication.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.doubleclick.net http://doubleclick.net https://doubleclick.net *.googlesyndication.com http://googlesyndication.com https://googlesyndication.com *.gstatic.com http://gstatic.com https://gstatic.com *.google.com http://google.com https://google.com *.yandex.ru http://yandex.ru https://yandex.ru *.google-analytics.com http://google-analytics.com https://google-analytics.com *.yandex.st http://yandex.st https://yandex.st *.google.ru http://google.ru https://google.ru *.googleapis.com http://googleapis.com https://googleapis.com https://*.doubleclick.net https://*.googlesyndication.com https://*.gstatic.com https://*.yandex.ru https://*.google-analytics.com https://*.yandex.st https://*.google.ru https://*.google.com https://*.googleapis.com http://yandex.net *.yandex.net https://*.yandex.net https://yandex.net *.yastatic.net http://yastatic.net https://*.yastatic.net https://yastatic.net *.facebook.com https://*.facebook.com http://facebook.com https://facebook.com *.mail.ru https://*.mail.ru http://mail.ru https://mail.ru *.ok.ru https://*.ok.ru http://ok.ru https://ok.ru *.twitter.com https://*.twitter.com http://twitter.com https://twitter.com *.vk.com https://*.vk.com http://vk.com https://vk.com; style-src 'self' 'unsafe-inline' *.gstatic.com http://gstatic.com https://gstatic.com fonts.googleapis.com http://fonts.googleapis.com https://fonts.googleapis.com *.google.com http://google.com https://google.com https://*.gstatic.com https://*.google.com *.googleapis.com http://googleapis.com https://googleapis.com https://*.googleapis.com *.yastatic.net http://yastatic.net https://*.yastatic.net https://yastatic.net; report-uri /csp.php |