X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=utf-8 X-Powered-By: PHP/5.6.29 Strict-Transport-Security: max-age=15768000; Etag: "1492981228-0" Cache-Control: public, max-age=0 Vary: Cookie,Accept-Encoding HTTP/1.1 200 OK Expires: Sun, 19 Nov 1978 05:00:00 GMT Connection: keep-alive Content-Security-Policy: default-src 'self' lessday.ru gsa: mx: https://*.yandex.ru *.yandex.ru an.yandex.ru https://an.yandex.ru https://*.yandex.net *.yandex.net *.yandexadexchange.net yandexadexchange.net https://*.yandexadexchange.net yastatic.net yandex.st *.yandex.st https://yandex.st https://*.yandex.st *.yastatic.net https://mc.yandex.ru https://*.metabar.ru *.metabar.ru https://vk.com vk.com https://*.vk.com https://*.youtube.com https://youtube.com *.youtube.com youtube.com https://*.googlevideo.com https://*.ytimg.com https://*.gstatic.com *.gstatic.com https://*.google.com https://google.com *.google.com google.com https://*.googleapis.com *.googleapis.com https://*.doubleclick.net *.doubleclick.net https://*.googleadservices.com https://instagram.com https://*.instagram.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.yandex.ru an.yandex.ru https://an.yandex.ru *.yandex.ru https://*.yandex.net *.yandex.net https://yastatic.net yastatic.net *.yandexadexchange.net yandexadexchange.net https://*.yandexadexchange.net https://*.metabar.ru *.metabar.ru https://*.google.com *.google.com https://*.googleapis.com *.googleapis.com https://vk.com vk.com https://*.youtube.com https://youtube.com *.instagram.com https://*.instagram.com https://*.googletagmanager.com https://googletagmanager.com *.googletagmanager.com googletagmanager.com; img-src 'self' data: *.yadro.ru https://*.yadro.ru https://*.yandex.ru *.yandex.ru yandex.ru an.yandex.ru https://an.yandex.ru https://*.yandex.net *.yandex.net https://*.yandex.ua https://yastatic.net yandex.st *.yandex.st https://yandex.st https://*.yandex.st https://*.yandex.com.tr vk.com https://vk.com https://*.gstatic.com *.gstatic.com https://*.ytimg.com translate.google.com https://*.googlezip.net *.googlezip.net; style-src 'self' 'unsafe-inline' https://yastatic.net yastatic.net https://*.googleapis.com *.googleapis.com; object-src 'self' *.gstatic.com *.googlevideo.com https://*.googlevideo.com *.ytimg.com ytimg.com https://*.ytimg.com *.youtube.com youtube.com https://*.gstatic.com; connect-src 'self' data: blob: https://*.yandex.ru *.yandex.ru https://yandex.ru yandex.ru yandex.st https://*.googleapis.com *.googleapis.com; font-src 'self' data: http://*.gstatic.com *.gstatic.com https://*.googleusercontent.com; report-uri http://lessday.ru/csp/csp.php; Server: nginx/1.4.3 X-Drupal-Cache: HIT Date: Mon, 24 Apr 2017 06:05:18 GMT X-XSS-Protection: 1; mode=block Link: <http://lessday.ru/>; rel="canonical",<http://lessday.ru/>; rel="shortlink" Transfer-Encoding: chunked X-Generator: Drupal 7 (http://drupal.org) X-Content-Type-Options: nosniff Content-Language: ru Last-Modified: Sun, 23 Apr 2017 21:00:28 GMT