Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Date: Wed, 24 May 2017 14:50:02 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 37899 HTTP/1.1 200 OK Content-Security-Policy: object-src 'self';default-src 'self';form-action 'self' ;frame-ancestors 'self';media-src 'self' *.w.org;font-src data: 'self' *.gstatic.com netdna.bootstrapcdn.com https://maxcdn.bootstrapcdn.com;connect-src 'self' https://api.wordpress.org https://*.webvisor.com *.yandex.ru;style-src data: 'self' 'unsafe-inline' https://simcitynews.ru *.googleapis.com netdna.bootstrapcdn.com https://maxcdn.bootstrapcdn.com;child-src 'self' iframe-toloka.com https://toloka.yandex.com *.yandex.ru https://st.yandexadexchange.net yandexadexchange.net https://www.youtube.com https://youtube.com *.youtube.com https://www.google.com https://videopress.com wp-themes.com micropolis.mostka.com *.tradedoubler.com player.vimeo.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://simcitynews.ru yastatic.net *.yadro.ru https://d31j93rd8oukbv.cloudfront.net https://*.webvisor.com https://*.yandex.ru *.yandex.ru *.googleapis.com http://www.google.com https://www.google.com https://www.gstatic.com https://videopress.com *.top100.ru;img-src data: *; Connection: keep-alive X-Content-Type-Options: nosniff Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Server: nginx