| Content-Security-Policy | default-src 'self';style-src 'unsafe-inline' *;frame-src 'self' http://vk.com https://vk.com https://api.vk.com http://api.vk.com http://login.vk.com https://login.vk.com http://connect.facebook.net http://www.facebook.com http://*.facebook.com http://*.uptolike.com http://uptolike.com http://*.cackle.me http://cackle.me http://*.doubleclick.net https://*.doubleclick.net http://youtube.com https://youtube.com https://*.youtube.com http://*.youtube.com https://*.googlesyndication.com http://*.googlesyndication.com http://*.yandex.ru https://*.yandex.ru ;img-src * data:;media-src *;font-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: http://*.yandex.ru https://*.yandex.ru http://youtube.com https://youtube.com http://*.youtube.com http://*.googleapis.com https://*.googleapis.com https://google.com http://google.com https://*.google.com http://*.google.com http://*.googlesyndication.com https://*.googlesyndication.com https://yastatic.net http://yastatic.net http://*.doubleclick.net https://*.doubleclick.net http://*.yandex.net https://*.yandex.net http://*.uptolike.com http://uptolike.com http://filesfrog.info http://*.cackle.me http://vk.com https://vk.com https://api.vk.com http://api.vk.com http://connect.facebook.net http://www.facebook.com http://*.facebook.com http://cackle.me;connect-src *; object-src *; report-uri /csp.php |