Google seems to be recommending a new snippet for setting up analytics: https://developers.google.com/analytics/devguides/collection/gtagjs/
I think this means https://www.googletagmanager.com should be whitelisted. I'm not sure if this should be a separate entry or if it can be added to the existing googleAnalytics service. There's a lot of domains in there already which seems unnecessary?
Note that events are sent to https://www.google-analytics.com through img-src.
Google seems to be recommending a new snippet for setting up analytics: https://developers.google.com/analytics/devguides/collection/gtagjs/
I think this means
https://www.googletagmanager.comshould be whitelisted. I'm not sure if this should be a separate entry or if it can be added to the existinggoogleAnalyticsservice. There's a lot of domains in there already which seems unnecessary?Note that events are sent to
https://www.google-analytics.comthroughimg-src.