| Content-Security-Policy | default-src 'self' data: google-analytics.com *.google-analytics.com https://*.google-analytics.com google.com *.google.com https://*.google.com googleapis.com *.googleapis.com https://*.googleapis.com gstatic.com *.gstatic.com https://*.gstatic.com doubleclick.net *.doubleclick.net https://*.doubleclick.net googlesyndication.com *.googlesyndication.com https://*.googlesyndication.com yandex.ru *.yandex.ru https://*.yandex.ru ;style-src 'self' 'unsafe-inline' google-analytics.com *.google-analytics.com https://*.google-analytics.com google.com *.google.com https://*.google.com googleapis.com *.googleapis.com https://*.googleapis.com gstatic.com *.gstatic.com https://*.gstatic.com doubleclick.net *.doubleclick.net https://*.doubleclick.net googlesyndication.com *.googlesyndication.com https://*.googlesyndication.com yandex.ru *.yandex.ru https://*.yandex.ru ;frame-src 'self' google-analytics.com *.google-analytics.com https://*.google-analytics.com google.com *.google.com https://*.google.com googleapis.com *.googleapis.com https://*.googleapis.com gstatic.com *.gstatic.com https://*.gstatic.com doubleclick.net *.doubleclick.net https://*.doubleclick.net googlesyndication.com *.googlesyndication.com https://*.googlesyndication.com yandex.ru *.yandex.ru https://*.yandex.ru ;img-src 'self' google-analytics.com *.google-analytics.com https://*.google-analytics.com google.com *.google.com https://*.google.com googleapis.com *.googleapis.com https://*.googleapis.com gstatic.com *.gstatic.com https://*.gstatic.com doubleclick.net *.doubleclick.net https://*.doubleclick.net googlesyndication.com *.googlesyndication.com https://*.googlesyndication.com yandex.ru *.yandex.ru https://*.yandex.ru ;media-src 'self' google-analytics.com *.google-analytics.com https://*.google-analytics.com google.com *.google.com https://*.google.com googleapis.com *.googleapis.com https://*.googleapis.com gstatic.com *.gstatic.com https://*.gstatic.com doubleclick.net *.doubleclick.net https://*.doubleclick.net googlesyndication.com *.googlesyndication.com https://*.googlesyndication.com yandex.ru *.yandex.ru https://*.yandex.ru ;font-src 'self' google-analytics.com *.google-analytics.com https://*.google-analytics.com google.com *.google.com https://*.google.com googleapis.com *.googleapis.com https://*.googleapis.com gstatic.com *.gstatic.com https://*.gstatic.com doubleclick.net *.doubleclick.net https://*.doubleclick.net googlesyndication.com *.googlesyndication.com https://*.googlesyndication.com yandex.ru *.yandex.ru https://*.yandex.ru ;script-src 'self' 'unsafe-inline' 'unsafe-eval' google-analytics.com *.google-analytics.com https://*.google-analytics.com google.com *.google.com https://*.google.com googleapis.com *.googleapis.com https://*.googleapis.com gstatic.com *.gstatic.com https://*.gstatic.com doubleclick.net *.doubleclick.net https://*.doubleclick.net googlesyndication.com *.googlesyndication.com https://*.googlesyndication.com yandex.ru *.yandex.ru https://*.yandex.ru ; report-uri /csp.php; |