ETag: 89d82d7db84668b637015a9ad58ace4d Server: nginx Connection: keep-alive X-UA-Compatible: IE=Edge Last-Modified: Sat, 17 Jun 2017 20:10:22 GMT Content-Length: 113246 Content-Security-Policy: default-src 'none'; child-src *; connect-src 'self' www.google-analytics.com *.maps.2gis.com *.api.2gis.ru *.hypercomments.com wss://*.hypercomments.com mc.yandex.ru www.1c-bitrix.ru; img-src 'self' blob: data: lidiyagorkova-a.akamaihd.net *.maps.2gis.com maps.api.2gis.ru stats.g.doubleclick.net www.google-analytics.com static.hypercomments.com secure.gravatar.com *.wp.com yastatic.net an.yandex.ru mc.yandex.ru cm.g.doubleclick.net sync.botscanner.com ads.betweendigital.com dmg.digitaltarget.ru api-maps.yandex.ru *.maps.yandex.net; font-src 'self' tagmanager.google.com; form-action 'self'; frame-ancestors 'self' http://webvisor.com; frame-src *; reflected-xss block; referrer unsafe-url; sandbox allow-forms allow-modals allow-popups allow-same-origin allow-scripts allow-top-navigation; script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.api.2gis.ru www.google-analytics.com www.googletagmanager.com apis.google.com tagmanager.google.com *.hypercomments.com mc.yandex.ru yandex.st translate.yandex.net clck.yandex.ru api-maps.yandex.ru pass.yandex.ru yastatic.net; style-src 'self' 'unsafe-inline' tagmanager.google.com static.hypercomments.com; report-uri https://alphawave.report-uri.io/r/default/csp/enforce Date: Sat, 17 Jun 2017 23:05:54 GMT HTTP/1.1 200 OK Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Type: text/html; charset=UTF-8 X-Bitrix-Composite: Cache (200) Expires: Sat, 17 Jun 2017 23:05:54 GMT Public-Key-Pins: pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; pin-sha256="sRHdihwgkaib1P1gxX8HFszlD+7/gTfNvuAybgLPNis="; max-age=604800; report-uri="https://alphawave.report-uri.io/r/default/hpkp/enforce" Cache-Control: max-age=0 Strict-Transport-Security: max-age=31536000; preload