Date: Thu, 15 Jun 2017 13:09:26 GMT Server: nginx X-Content-Type-Options: nosniff Transfer-Encoding: chunked Vary: Accept-Encoding Vary: Accept-Encoding HTTP/1.1 200 OK Connection: keep-alive X-XSS-Protection: 1; mode=block Expires: Sun, 19 Nov 1978 05:00:00 GMT Content-Type: text/html; charset=utf-8 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 X-Cached-By: Boost Content-Security-Policy: default-src 'self' next-gazel.ru www.next-gazel.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.gstatic.com https://*.gstatic.com http://*.google.com https://*.google.com http://*.twitter.com https://*.twitter.com http://*.facebook.net https://*.facebook.net http://*.keycaptcha.com https://*.keycaptcha.com http://youtube.com https://youtube.com http://*.googlesyndication.com https://*.googlesyndication.com http://loginza.ru https://loginza.ru http://*.yandex.ru https://*.yandex.ru http://vk.com https://vk.com http://*.googleapis.com https://*.googleapis.com; frame-src 'self' http://*.google.com https://*.google.com http://*.twitter.com https://*.twitter.com http://*.facebook.com https://*.facebook.com http://*.keycaptcha.com https://*.keycaptcha.com http://youtube.com https://youtube.com http://*.youtube.com https://*.youtube.com http://*.doubleclick.net https://*.doubleclick.net http://loginza.ru https://loginza.ru; object-src 'self' *; img-src 'self' * data:; font-src 'self' * data:; connect-src 'self' *; style-src 'unsafe-inline' 'unsafe-eval' 'self' *; report-uri http://paxweb.ru/csp.php