[e12e]

If you're using Google tag manager, the csp would have to allow scripts from gtm though?

[dylz]

Yes, but it won't allow GTM to load scripts off OTHER domains. It basically re-adds the requirement of engineering gating off 300 different adtech trackers.