Tune CORS to allow analytics

[samdark]

• This page uses the non standard property “zoom”. Consider using calc() in the relevant property values, or using “transform” along with “transform-origin: 0 0”. yii-db-activerecord
• Loading failed for the <script> with source “https://www.googletagmanager.com/gtag/js?id=G-707ZP35KCT”. yii-db-activerecord:48:1
• Content Security Policy: The page’s settings blocked the loading of a resource at https://www.googletagmanager.com/gtag/js?id=G-707ZP35KCT (“script-src”).

at https://www.yiiframework.com/doc/api/2.0/yii-db-activerecord

[lubosdz]

Would adding the crossorigin attribute to tagmanager link not help? (not sure, just tip)
<script crossorigin="anonymous" async src="https://www.googletagmanager.com/gtag/js?id=G-707ZP35KCT"></script>