Browsers block Google Analytics on the site www.yiiframework.com #1035
Description
What steps will reproduce the problem?
Follow the https://www.yiiframework.com and open the web-console.
Chromium console:
Refused to load the script 'https://www.googletagmanager.com/gtag/js?id=G-707ZP35KCT' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' https://kiwiirc.com".
I think it is necessary to add https://www.googletagmanager.com to the Content-Security-Policy response header, directive script-src to the production nginx site config.