CSP

Content-Security-Policy:

default-src 'none';

connect-src 'self' an.yandex.ru strm.yandex.ru mc.yandex.ru yandex.st yastatic.net matchid.adfox.yandex.ru adfox.yandex.ru ads.adfox.ru ads6.adfox.ru jstracer.yandex.ru yastat.net yandex.ru adwords-displayads.googleusercontent.com *.googlesyndication.com *.google.com *.google.ae *.google.at *.google.be *.google.ca *.google.ch *.google.cn *.google.co.il *.google.ca *.google.co.jp *.google.co.kr *.google.co.nz *.google.co.uk *.google.co.ve *.google.co.za *.google.com.ar *.google.com.au *.google.com.br *.google.com.gr *.google.com.hk *.google.com.ly *.google.com.mx *.google.com.my *.google.com.pe *.google.com.ph *.google.com.pk *.google.com.ru *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.vn *.google.de *.google.dk *.google.es *.google.fi *.google.fr *.google.it *.google.lt *.google.lv *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.se *.google.sk *.youtube.com *.ytimg.com *.2mdn.net *.doubleclick.net *.doubleclick.com *.googleapis.com *.googleadservices.com *.fwmrm.net *.sohu.com *.ifeng.com *.ifengimg.com *.mgtv.com *.hunantv.com *.le.com;

frame-src awaps.yandex.net yandexadexchange.net *.yandexadexchange.net yastatic.net *.yandex.ru banners.adfox.ru yastat.net adwords-displayads.googleusercontent.com *.googlesyndication.com *.google.com *.google.ae *.google.at *.google.be *.google.ca *.google.ch *.google.cn *.google.co.il *.google.ca *.google.co.jp *.google.co.kr *.google.co.nz *.google.co.uk *.google.co.ve *.google.co.za *.google.com.ar *.google.com.au *.google.com.br *.google.com.gr *.google.com.hk *.google.com.ly *.google.com.mx *.google.com.my *.google.com.pe *.google.com.ph *.google.com.pk *.google.com.ru *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.vn *.google.de *.google.dk *.google.es *.google.fi *.google.fr *.google.it *.google.lt *.google.lv *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.se *.google.sk *.youtube.com *.ytimg.com *.2mdn.net *.doubleclick.net *.doubleclick.com *.googleapis.com *.googleadservices.com *.fwmrm.net *.sohu.com *.ifeng.com *.ifengimg.com *.mgtv.com *.hunantv.com *.le.com;

img-src 'self' data: *.yandex.net an.yandex.ru verify.yandex.ru *.verify.yandex.ru banners.adfox.ru content.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net adwords-displayads.googleusercontent.com *.googlesyndication.com *.google.com *.google.ae *.google.at *.google.be *.google.ca *.google.ch *.google.cn *.google.co.il *.google.ca *.google.co.jp *.google.co.kr *.google.co.nz *.google.co.uk *.google.co.ve *.google.co.za *.google.com.ar *.google.com.au *.google.com.br *.google.com.gr *.google.com.hk *.google.com.ly *.google.com.mx *.google.com.my *.google.com.pe *.google.com.ph *.google.com.pk *.google.com.ru *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.vn *.google.de *.google.dk *.google.es *.google.fi *.google.fr *.google.it *.google.lt *.google.lv *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.se *.google.sk *.youtube.com *.ytimg.com *.2mdn.net *.doubleclick.net *.doubleclick.com *.googleapis.com *.googleadservices.com *.fwmrm.net *.sohu.com *.ifeng.com *.ifengimg.com *.mgtv.com *.hunantv.com *.le.com;

media-src *.yandex.net strm.yandex.ru *.strm.yandex.ru yandex.ru yandex.st yastatic.net banners.adfox.ru content.adfox.ru adwords-displayads.googleusercontent.com *.googlesyndication.com *.google.com *.youtube.com *.ytimg.com *.2mdn.net *.doubleclick.net *.doubleclick.com *.googleadservices.com *.googleapis.com yastat.net data:;

script-src 'unsafe-inline' 'unsafe-eval' an.yandex.ru yandex.st yastatic.net mc.yandex.ru banners.adfox.ru ads.adfox.ru ads6.adfox.ru yastat.net yandex.ru adwords-displayads.googleusercontent.com *.googlesyndication.com *.google.com *.youtube.com *.ytimg.com *.2mdn.net *.doubleclick.net *.doubleclick.com *.googleapis.com *.googleadservices.com *.fwmrm.net *.sohu.com *.ifeng.com *.ifengimg.com *.mgtv.com *.hunantv.com *.le.com;

style-src 'unsafe-inline' 'unsafe-eval' yandex.st yastatic.net banners.adfox.ru content.adfox.ru yastat.net adwords-displayads.googleusercontent.com *.googlesyndication.com *.ytimg.com *.2mdn.net *.doubleclick.net *.doubleclick.com *.googleapis.com *.googleadservices.com;

font-src 'self' data: an.yandex.ru yastatic.net yastat.net