| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://site.yandex.net/ https://yastatic.net/jquery/1.6.2/jquery.min.js https://yastatic.net/jquery/1.6.2/jquery.min.js https://mc.yandex.ru/ http://mc.yandex.ru/ http://site.yandex.net/v2.0/js/all.js http://wapiko.ru/ http://w.uptolike.com http://w.uptolike.com/widgets/v1/uptolike.js http://vk.com/ *.akamaihd.net *.amazonaws.com *.ytimg.com http://*.whisla.com https://*.googleapis.com https://*.google.com *.google.com *.gstatic.com https://*.gstatic.com www.google-analytics.com https://www.google-analytics.com http://*.googlesyndication.com https://*.googlesyndication.com *.googleapis.com *.doubleclick.net; object-src 'self' http://*.ytimg.com *.macromedia.com *.adobe.com https://*.adobe.com https://*.googleapis.com http://www.youtube.com https://www.youtube.com *.gstatic.com *.yandex.ru https://mc.yandex.ru https://sitesuggest.yandex.ru/ https://yandex.ru/ https://site.yandex.net/ https://yastatic.net/ http://site.yandex.net http://mobioffers.ru http://w.uptolike.com https://w.uptolike.com http://counter.rambler.ru my2.imgsmail.ru www.gstatic.com yandex.st an.yandex.ru mc.yandex.ru pagead2.googlesyndication.com www.youtube.com vk.com cdn.connect.mail.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com http://www.youtube.com/ www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: http://site.yandex.net/ https://mc.yandex.ru http://d9.c1.bf.a1.top.mail.ru/ http://yandex.ru https://site.yandex.net/ http://w.uptolike.com http://pagead2.googlesyndication.com http://d8.c8.be.a1.top.mail.ru 0.gravatar.com http://0.gravatar.com/ 1.gravatar.com http://1.gravatar.com/ http://an.yandex.ru/count/ favicon.yandex.net http://favicon.yandex.net avatars-fast.yandex.net http://avatars-fast.yandex.net/ vk.com yastatic.net counter.rambler.ru top-fwz1.mail.ru www.liveinternet.ru www.sunhome.ru counter.yadro.ru mc.yandex.ru www.google-analytics.com https://www.google-analytics.com; media-src 'self' * mediastream: *; frame-src 'self' 'unsafe-eval' http://w.uptolike.com https://vk.com/ http://vk.com/ blocking.stat *.yahoo.com *.hubrus.com http://yandex.sc http://www.youtube.com https://www.youtube.com http://*.googlesyndication.com *.doubleclick.net https://*.doubleclick.net https://*.google.com http://*.google.com; font-src 'self' http://w.uptolike.com; connect-src 'self' https://mc.yandex.ru http://w.uptolike.com http://mobioffers.ru mc.yandex.ru https://www.youtube.com *.googlevideo.com https://*.gstatic.com |