X-XSS-Protection: 1; mode=block X-Powered-By: PHP/5.3.29 X-Frame-Options: SAMEORIGIN Server: nginx Content-Type: text/html; charset=utf-8 Connection: keep-alive Content-Security-Policy: default-src 'self' http://www.datarun.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.datarun.ru http://yandex.st http://*.google.com https://*.google.com *.google.com http://mc.yandex.ru http://*.googleapis.com https://*.googleapis.com *.googleapis.com http://*.gstatic.com https://*.gstatic.com *.gstatic.com https://*.googlesyndication.com http://*.googlesyndication.com *.googlesyndication.com http://*.doubleclick.net https://*.doubleclick.net *.doubleclick.net http://*.google-analytics.com https://*.google-analytics.com *.google-analytics.com https://*.2mdn.net http://*.2mdn.net *.2mdn.net; object-src 'self' http://www.datarun.ru https://*.googlesyndication.com http://*.googlesyndication.com *.googlesyndication.com https://*.ytimg.com http://*.ytimg.com *.ytimg.com https://*.youtube.com http://*.youtube.com *.youtube.com http://*.gstatic.com https://*.gstatic.com *.gstatic.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.datarun.ru http://*.googleapis.com https://*.googleapis.com *.googleapis.com http://*.gstatic.com https://*.gstatic.com *.gstatic.com https://*.google.com; img-src 'self' data: http://www.datarun.ru http://yastatic.net https://*.google.com http://*.google.com *.google.com https://*.google.ru https://*.2mdn.net http://*.2mdn.net *.2mdn.net http://*.feedburner.com http://*.google-analytics.com https://*.google-analytics.com *.google-analytics.com http://*.gstatic.com https://*.gstatic.com *.gstatic.com https://*.googlesyndication.com http://*.googlesyndication.com *.googlesyndication.com http://*.googleapis.com https://*.googleapis.com *.googleapis.com http://*.doubleclick.net https://*.doubleclick.net *.doubleclick.net http://*.yandex.ru https://*.yandex.ru *.yandex.ru http://*.yadro.ru https://*.yadro.ru *.yadro.ru http://*.mail.ru http://*.rambler.ru; child-src 'self' http://www.datarun.ru http://*.doubleclick.net http://yandex.st http://yastatic.net https://*.doubleclick.net *.doubleclick.net http://*.google.com https://*.google.com *.google.com https://*.googleadservices.com http://*.googleadservices.com *.googleadservices.com https://*.googlesyndication.com http://*.googlesyndication.com *.googlesyndication.com https://*.yandex.ru http://*.yandex.ru *.yandex.ru; font-src 'self' data: http://www.datarun.ru http://*.gstatic.com https://*.gstatic.com *.gstatic.com http://*.googleapis.com https://*.googleapis.com *.googleapis.com; connect-src 'self' http://www.datarun.ru https://*.yahooapis.com https://*.youtube.com http://*.youtube.com *.youtube.com http://*.googleapis.com https://*.googleapis.com *.googleapis.com http://*.yandex.ru https://*.yandex.ru *.yandex.ru; HTTP/1.1 200 OK Cache-Control: private, must-revalidate Vary: User-Agent Date: Sun, 30 Apr 2017 01:28:31 GMT Transfer-Encoding: chunked