| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' onclickads.net https://onclickads.net go.onclasrv.com c.100im.info c.100im.net am15.net *.am15.net *.marketgid.com openstat.net cdn.connect.mail.ru vk.com https://vk.com *.google.com *.gstatic.com https://apis.google.com https://www.googleapis.com https://www.google.com pagead2.googlesyndication.com www.google-analytics.com https://www.google-analytics.com; object-src 'self' www.gstatic.com; style-src 'self' 'unsafe-inline' *.marketgid.com www.google.com https://www.google.com fonts.googleapis.com; img-src *; media-src 'self' *.mail.ru; frame-src 'self' am15.net *.am15.net connect.mail.ru vk.com https://vk.com https://login.vk.com https://apis.google.com https://accounts.google.com googleads.g.doubleclick.net; font-src 'self' data: fonts.gstatic.com; connect-src 'self' toptracker.ru:8181 *.toptracker.ru:8181 ws://toptracker.ru:8181 ws://www.toptracker.ru:8181 *.gstatic.com; |