Browsers block Google Analytics on the site www.yiiframework.com

[gmdmi]

What steps will reproduce the problem?

Follow the https://www.yiiframework.com and open the web-console.

Chromium console:
Refused to load the script 'https://www.googletagmanager.com/gtag/js?id=G-707ZP35KCT' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' https://kiwiirc.com".

---

I think it is necessary to add https://www.googletagmanager.com to the Content-Security-Policy response header, directive script-src to the production nginx site config.