Strict-Transport-Security: max-age=15768000 Vary: Accept-Encoding X-XSS-Protection: 1; mode=block Content-Length: 52064 X-Node: node2 Connection: keep-alive Date: Sat, 03 Jun 2017 00:10:33 GMT Set-Cookie: sid=a15de3345ef2ac4ff8004a6a19b6818d; expires=Wed, 02-Aug-2017 00:10:33 GMT; Max-Age=5184000; path=/; HttpOnly HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' static.ekapusta.ru static.e-kapusta.ru; img-src 'self' data: mc.yandex.ru vk.com static.ekapusta.ru static.e-kapusta.ru top-fwz1.mail.ru login.vk.com www.facebook.com storage101.lon3.clouddrive.com *.google-analytics.com *.google.com *.google.ru *.doubleclick.net counter.yadro.ru www.googleadservices.com *.googlesyndication.com ekapusta.zendesk.com media.reformal.ru reformal.ru *.zdusercontent.com; style-src 'self' 'unsafe-inline' static.ekapusta.ru static.e-kapusta.ru maxcdn.bootstrapcdn.com www.gstatic.com; font-src 'self' static.ekapusta.ru static.e-kapusta.ru maxcdn.bootstrapcdn.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: mc.yandex.ru static.ekapusta.ru static.e-kapusta.ru connect.facebook.net top-fwz1.mail.ru *.google-analytics.com www.googleadservices.com kladr-api.ru *.doubleclick.net media.reformal.ru *.gstatic.com *.jquery.com cdnjs.cloudflare.com; connect-src 'self' e-kapusta.ru ekapusta.ru wss://ekapusta.ru wss://e-kapusta.ru mc.yandex.ru *.google-analytics.com ws://localhost:3000; media-src 'self' * blob:; frame-src 'self' reformal.ru; report-uri /start/csp_report Link: <https://e-kapusta.ru/>, rel="canonical" X-Frame-Options: SAMEORIGIN Server: nginx Set-Cookie: CakeCookie[EK_V]=16878927; expires=Mon, 03-Jul-2017 00:10:33 GMT; Max-Age=2592000; path=/ Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff