Sber.ru - Developers.sber.ru

server: nginx
date: Sat, 26 Apr 2025 07:05:23 GMT
content-type: text/html; charset=utf-8
x-nextjs-cache: HIT
x-powered-by: Next.js
cache-control: s-maxage=100, stale-while-revalidate
etag: "n9f6y72o9v54gl"
vary: Accept-Encoding
content-encoding: gzip
cache-control: no-cache
content-security-policy-report-only: default-src 'self' https://cdn-app.sberdevices.ru; script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' abt.s3.yandex.net mapgl.2gis.com https://ad.adriver.ru https://cdn-app.sberdevices.ru/ https://code.jivo.ru/widget/CVgSX9az2t https://code.jivo.ru/widget/3PUKdqHYcF https://code.jivo.ru/js/bundle_ru_RU.js https://mc.yandex.ru https://top-fwz1.mail.ru/js/code.js https://vk.com/js/api/openapi.js https://www.gstatic.com https://ai.github.io/audio-recorder-polyfill/polyfill.js https://sberdevices.smcrm.sber.ru https://static.smcrm.sber.ru/formPage.min.js https://static.crm.sbc.space/formPage.min.js https://b2b-bundle.crm.sbc.space https://app.sbercrm.com; style-src 'unsafe-inline' 'report-sample' 'self' https://cdn-app.sberdevices.ru https://code.jivo.ru https://static.smcrm.sber.ru/formPage.min.css https://static.crm.sbc.space/formPage.min.css; object-src 'none'; base-uri 'self'; connect-src 'self' blob: uaas.yandex.ru *.2gis.com https://api.eye.sbdv.ru https://cbdv.dev.sberdevices.ru http://127.0.0.1:29009 http://127.0.0.1:30102 ymetrica1.com yandexmetrica.com:30103 yandexmetrica.com:29010 https://mc.yandex.md https://mc.yandex.by https://mc.yandex.kz https://sm-smart-proxy-ift.apps.sgmd.sberdevices.ru https://stats.g.doubleclick.net/j/collect https://www.google-analytics.com https://sentry-api.sberdevices.ru https://cdn-app.sberdevices.ru https://mc.yandex.ru https://metrics.prom.third-party-app.sberdevices.ru https://top-fwz1.mail.ru https://vk.com https://node-sber1-az1-1.jivosite.com https://telemetry.jivosite.com/w https://app.kizen.com https://yandexmetrica.com https://crm.sbc.space https://smcrm.sber.ru https://mc.yandex.com wss://*.jivosite.com wss://*.jivo.ru https://*.jivo.ru https://app.sbercrm.com; font-src 'self' data: https://cdn-app.sberdevices.ru https://static.smcrm.sber.ru https://static.crm.sbc.space https://fonts.gstatic.com https://app.sbercrm.com; frame-src 'self' https://content.adriver.ru https://www.youtube.com https://vk.com https://player.vimeo.com https://www.google.com https://mc.yandex.ru https://mc.yandex.md https://www.youtube-nocookie.com https://kanzas.prom.app.sberdevices.ru cdn-sber-ru-video.sberdevices.ru; img-src 'self' data: https://top-fwz1.mail.ru https://favicon.yandex.net https://code.jivo.ru https://i.vimeocdn.com https://vk.com https://vk.com/rtrg https://www.googletagmanager.com https://i.ytimg.com https://www.google.md/ads/ga-audiences https://www.google.de/ads/ga-audiences https://www.google.ru/ads/ga-audiences https://cdn-app.sberdevices.ru https://vk.com https://www.google-analytics.com https://www.google.com/ads/ga-audiences https://mc.yandex.ru https://files.jivo.ru https://mc.yandex.md https://mc.yandex.com; manifest-src 'self'; media-src data: 'self' https://code.jivo.ru https://cdn-app.sberdevices.ru; frame-ancestors 'none'; report-uri https://sentry-api.sberdevices.ru/api/53/security/?sentry_key=1d9e9a95a396490881ec047a092a0639; worker-src 'none'
strict-transport-security: max-age=63072000; includeSubdomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block