And if you want to lock down what kinds tags can run on your site, they have a nice whitelisting/blacklisting system that lets you block capabilities (e.g. customScripts to block arbitrary JS):
Thanks for those links. Am I missing something in them or would using managing GTM programmatically via their API kind of defeat the entire purpose of giving business users like myself the ability to add/manage tags?
Seems like a case where there's no good way to have our cake and eat it too in terms of usability for business users and testing/security for our engineers.
Seems like a case where there's no good way to have our cake and eat it too in terms of usability for business users and testing/security for our engineers.