| Content-Security-Policy | default-src 'self';style-src 'unsafe-inline' *;frame-src http://www.youtube.com https://www.youtube.com http://www.youtube-nocookie.com https://www.youtube-nocookie.com https://vk.com http://vk.com https://login.vk.com https://apis.google.com https://accounts.google.com http://www.google-analytics.com ;img-src * data:;media-src *;font-src *;script-src 'self' 'unsafe-inline' https://www.google-analytics.com http://www.google-analytics.com https://apis.google.com apis.google.com platform.twitter.com vk.com https://login.vk.com yastatic.net yandex.st *.yandex.st https://mc.yandex.ru mc.yandex.ru https://yandex.ru http://yandex.ru ;report-uri /csp2.php |