Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' http://mc.yandex.ru https://mc.yandex.ru; connect-src * 'self'; img-src data: 'self' http://*.img.avito.st https://*.img.avito.st http://cdn4.cian.ru https://cdn4.cian.ru http://www.cian.ru https://www.cian.ru http://imgtemp.cian.ru https://imgtemp.cian.ru http://s3.amazonaws.com https://s3.amazonaws.com http://world-invest.pro https://world-invest.pro; style-src 'self' 'unsafe-inline' http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com; font-src 'self' data: http://themes.googleusercontent.com https://themes.googleusercontent.com; frame-src 'self' http://www.youtube.com https://www.youtube.com; |