X-XSS-Protection: 1; mode=block HTTP/1.1 200 OK Server: nginx-reuseport/1.11.10 Content-Security-Policy: default-src 'self' *.pro-stranstva.ru pro-stranstva.ru; script-src 'self' 'unsafe-eval' 'unsafe-inline' pro-stranstva.ru *.yandex.ru yandex.ru *.yandex.net yandex.net *.yandex.st yandex.st *.yastatic.net yastatic.net https://api-maps.yandex.ru *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net https://*.yandex.ru https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' pro-stranstva.ru *.googleapis.com *.gstatic.com http://fonts.googleapis.com *.yandex.ru https://*.gstatic.com https://*.yandex.ru https://*.googleapis.com data:; img-src 'self' pro-stranstva.ru data: *.yandex.ru yandex.ru *.yandex.net yandex.st *.gravatar.com https://*.gravatar.com *.googlesyndication.com *.googleapis.com *.gstatic.com *.doubleclick.net https://*.yandex.ru https://*.yandex.net https://google.com https://*.googlesyndication.com https://*.googleapis.com https://*.gstatic.com https://*.doubleclick.net; font-src 'self' pro-stranstva.ru data: *.yandex.ru https://*.yandex.ru *.gstatic.com *.googleapis.com http://fonts.gstatic.com https://*.gstatic.com https://*.googleapis.com; connect-src 'self' pro-stranstva.ru mc.yandex.ru yandex.st https://yandex.ru https://mc.yandex.ru *.googleapis.com https://*.googleapis.com https://translate.googleapis.com; media-src 'none'; object-src 'self' an.yandex.ru *.gstatic.com *.googlesyndication.com https://an.yandex.ru https://*.gstatic.com; frame-src 'self' pro-stranstva.ru akismet.com *.yandex.ru yandex.ru *.yandex.net yandex.net *.yandex.st yandex.st *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net apis.google.com *.google.com https://*.google.ru https://*.google.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://apis.google.com youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.com https://*.youtube.ru https://*.youtube.com; report-uri http://pro-stranstva.ru/wp-content/plugins/csp/csp-collector.php Keep-Alive: timeout=30 Content-Type: text/html; charset=UTF-8 X-Frame-Options: DENY Vary: Accept-Encoding X-Content-Type-Options: nosniff Connection: keep-alive Date: Tue, 25 Apr 2017 15:33:32 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 X-Powered-By: PHP/5.4.45 Expires: Thu, 19 Nov 1981 08:52:00 GMT Transfer-Encoding: chunked Pragma: no-cache