| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.pay-click.ru *.reformal.ru *.youtube.com *.vnickname.ru *.chatovod.ru *.c.hit.ua *.adonweb.ru my2.imgsmail.ru www.gstatic.com yandex.st pagead2.googlesyndication.com vk.com cdn.connect.mail.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com; object-src 'self' www.gstatic.com; style-src 'self' 'unsafe-inline' *.chatovod.ru ; img-src 'self' data: *.vnickname.ru vk.com yastatic.net *.chatovod.ru www.liveinternet.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com reformal.ru *.reformal.ru *.youtube.com *.c.hit.ua youtube.com c.hit.ua pagead2.googlesyndication.com; media-src 'self' *.vnickname.ru; frame-src 'self' *.vnickname.ru *.chatovod.ru connect.mail.ru www.youtube.com youtube.com www.c.hit.ua googleads.g.doubleclick.net vk.com; font-src 'self' *.vnickname.ru; connect-src 'self' *.vnickname.ru mc.yandex.ru *.gstatic.com |