Content-Security-Policy: default-src 'self' *.semestr.ru;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.semestr.ru cdn.mathjax.org *.disqus.com maxcdn.bootstrapcdn.com ulogin.ru https://ulogin.ru *.appspot.com *.gstatic.com https://*.gstatic.com *.ytimg.com *.appsaddons.com https://dl.dropboxusercontent.com https://auth.robokassa.ru userapi.com *.webmoney.ru *.yandex.ru *.yandex.net https://*.yandex.net https://*.yandex.ru https://yastatic.net *.siteheart.com https://*.siteheart.com https://*.googleapis.com *.google.ru https://*.google.ru https://*.google.com *.google.com.ua *.google.com *.google-analytics.com https://*.google-analytics.com *.googlesyndication.com https://*.googlesyndication.com *.googleapis.com https://*.doubleclick.net *.doubleclick.net vk.com https://vk.com https://*.zaochnik.net;object-src 'self' *.gstatic.com https://*.gstatic.com *.googlesyndication.com https://*.googlesyndication.com *.ytimg.com https://*.ytimg.com https://*.googleapis.com *.youtube.com https://www.youtube.com alpari.ru *.alpari.ru *.googlevideo.com *.doubleclick.net https://*.doubleclick.net;style-src 'self' 'unsafe-inline' *.semestr.ru *.disquscdn.com maxcdn.bootstrapcdn.com cdn.mathjax.org *.appintop.com *.googleapis.com *.siteheart.com https://*.siteheart.com *.gstatic.com https://*.gstatic.com *.googleapis.com https://*.googleapis.com *.google.com https://*.google.com https://*.zaochnik.net;img-src *.semestr.ru https://*.disqus.com *.megastock.ru *.webmoney.ru *.yandex.ru https://*.yandex.net *.siteheart.com https://*.siteheart.com *.googleadservices.com https://*.googleadservices.com ulogin.ru https://ulogin.ru *.google.com https://*.google.com https://*.google.ru *.doubleclick.net https://*.doubleclick.net *.googleapis.com https://*.googleapis.com *.googlesyndication.com https://*.googlesyndication.com *.gstatic.com https://*.gstatic.com *.google-analytics.com https://*.google-analytics.com *.youtube.com counter.yadro.ru vk.com https://vk.com https://*.zaochnik.net https://r-money.ru data: *.semestr.ru;media-src 'self' *.semestr.ru *.siteheart.com https://*.siteheart.com mediastream: *.semestr.ru *.siteheart.com https://*.siteheart.com;frame-src 'self' *.semestr.ru disqus.com https://disqus.com https://auth.robokassa.ru cdn.mathjax.org *.ulogix.ru https://*.ulogix.ru ulogin.ru https://ulogin.ru https://c.mscimg.com *.yahoo.com https://*.yandex.ru https://yandex.ru *.siteheart.com https://*.siteheart.com *.webmoney.ru *.yandex.ru *.yandex.net vk.com https://vk.com https://*.vk.com *.youtube.com https://*.youtube.com *.googlesyndication.com https://*.googlesyndication.com *.googleadservices.com https://*.googleadservices.com *.doubleclick.net https://*.doubleclick.net *.google.ru https://*.google.ru https://*.google.com *.google.com *.facebook.com *.google.com.ua;font-src 'self' *.semestr.ru cdn.mathjax.org *.googleapis.com https://*.googleapis.com *.gstatic.com https://*.gstatic.com maxcdn.bootstrapcdn.com;connect-src 'self' *.semestr.ru https://static.siteheart.com ws://client.siteheart.com https://www.youtube.com *.alpari.ru https://*.googleapis.com mc.yandex.ru *.googlevideo.com *.google-analytics.com https://*.google-analytics.com https://r-money.ru HTTP/1.1 200 OK Server: nginx X-Content-Type-Options: nosniff Vary: Accept-Encoding Content-Type: text/html; charset=Windows-1251 X-XSS-Protection: 1; mode=block Last-Modified: Thu, 11 May 2017 01:44:34 GMT X-Frame-Options: DENY Connection: keep-alive Date: Thu, 11 May 2017 01:44:34 GMT Pragma: no-cache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Transfer-Encoding: chunked Set-Cookie: PHPSESSID=s7dtlf6c3s9ir8i9q3icsgdl47; path=/; HttpOnly