| Content-Security-Policy | default-src 'self';;script-src 'self' 'unsafe-inline' https://vkontakte.ru http://vkontakte.ru http://vk.com https://vk.com *.google-analytics.com *.cloudflare.com https://apis.google.com http://*.googleapis.com https://*.googleapis.com *.thesyriacampaign.org *.facebook.net *.facebook.com *.twitter.com https://*.google.com http://*.google.com;;object-src;img-src 'self' *.google-analytics.com *.gstatic.com http://vk.com https://vk.com;;media-src;frame-src 'self' http://*.facebook.com https://*.facebook.com *.twitter.com https://*.google.com http://*.google.com https://apis.google.com https://*.youtube.com http://*.youtube.com;;font-src 'self';;connect-src 'self' *.thesyriacampaign.org;;style-src 'self' 'unsafe-inline'; |