Из консоли
AndreyD 09.02.2018 09:11
Тех поддержка ответила, из браузера не работает:
% curl --head
https://www.yandex.ru/ HTTP/1.1 200 Ok
Date: Fri, 09 Feb 2018 05:55:43 GMT
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache,no-store,max-age=0,must-revalidate
Expires: Fri, 09 Feb 2018 05:55:43 GMT
Last-Modified: Fri, 09 Feb 2018 05:55:43 GMT
Content-Security-Policy: connect-src 'self'
wss://webasr.yandex.net https://mc.webvisor.com https://mc.webvisor.org wss://push.yandex.ru wss://portal-xiva.yandex.net https://yastatic.net https://home.yastatic.net https://yandex.ru https://*.yandex.ru static.yandex.sx brotli.yastatic.net et.yastatic.net portal-xiva.yandex.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net yandex.st; default-src 'self' blob:
wss://portal-xiva.yandex.net yastatic.net portal-xiva.yandex.net; font-src 'self'
https://yastatic.net static.yandex.sx brotli.yastatic.net et.yastatic.net yastatic.net; frame-src 'self' yabrowser: data:
https://ok.ru https://www.youtube.com https://player.video.yandex.net https://ya.ru https://yastatic.net https://yandex.ru https://*.yandex.ru wfarm.yandex.net yastatic.net yandex.ru *.yandex.ru awaps.yandex.net *.cdn.yandex.net; img-src 'self' data:
https://yastatic.net https://home.yastatic.net https://*.yandex.ru https://*.yandex.net https://*.tns-counter.ru ar.tns-counter.ru awaps.yandex.net ad.adriver.ru ad.doubleclick.net ads.adfox.ru bs.serving-sys.com track.rutarget.ru *.tns-counter.ru *.solution.weborama.fr *.yastatic.net gdeua.hit.gemius.pl pa.tns-ua.com mc.yandex.com mc.webvisor.com mc.webvisor.org static.yandex.sx brotli.yastatic.net et.yastatic.net yastatic.net home.yastatic.net yandex.ru *.yandex.ru *.yandex.net *.gemius.pl yandex.st; media-src 'self' blob: data: *.storage.yandex.net yastatic.net kiks.yandex.ru strm.yandex.ru; object-src 'self' *.yandex.net music.yandex.ru strm.yandex.ru yastatic.net kiks.yandex.ru awaps.yandex.net storage.mds.yandex.net; report-uri
https://csp.yandex.net/csp?from=big.ru&showid=1518155743.2872.22872.4177&h=f70&yandexuid=3016489461518155743; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:
https://suburban-widget.rasp.yandex.ru https://suburban-widget.rasp.yandex.net https://music.yandex.ru https://mc.yandex.fr https://mc.webvisor.com https://yandex.fr https://mc.webvisor.org https://yastatic.net https://home.yastatic.net https://mc.yandex.ru https://pass.yandex.ru an.yandex.ru api-maps.yandex.ru static.yandex.sx webasr.yandex.net brotli.yastatic.net et.yastatic.net yastatic.net home.yastatic.net yandex.ru www.yandex.ru mc.yandex.ru suggest.yandex.ru clck.yandex.ru awaps.yandex.net; style-src 'self' 'unsafe-inline'
https://yastatic.net https://home.yastatic.net static.yandex.sx brotli.yastatic.net et.yastatic.net yastatic.net home.yastatic.net;
P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"
Set-Cookie: yp=1520747743.ygu.1; Expires=Mon, 07-Feb-2028 05:55:43 GMT; Domain=.yandex.ru; Path=/
Set-Cookie: mda=0; Expires=Sat, 09-Jun-2018 05:55:43 GMT; Domain=.yandex.ru; Path=/
Set-Cookie: yandex_gid=213; Expires=Sun, 11-Mar-2018 05:55:43 GMT; Domain=.yandex.ru; Path=/
Set-Cookie: yandexuid=3016489461518155743; Expires=Mon, 07-Feb-2028 05:55:43 GMT; Domain=.yandex.ru; Path=/
X-Frame-Options: DENY
Set-Cookie: i=8LPgWYaPZYodKOL4mpGfaTjXI3GZ+g+sN4c8f//bS6aVZ9dcJJBE4TPxndDZiRtXXh4UvJG3k6xG73LNGDqsrAybL0E=; Expires=Mon, 07-Feb-2028 05:55:43 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly
X-Content-Type-Options: nosniff
Content-Length: 134765