anchor.diff:      'https://pub.dartlang.org/static/', // older dartdoc content requires it
       "'unsafe-inline'", // package page (esp. analysis tab) required is
       'https://fonts.googleapis.com/',
  +    'https://gstatic.com',
  +    'https://www.gstatic.com/',
  +    'https://tagmanager.google.com',
     ],
     'worker-src': _none,
   };
  
positive.code:   'media-src': _none,
    'object-src': _none,
    'script-src': <String>[
      "'self'",
      'https://www.googletagmanager.com/',
      'https://www.google.com/',
      'https://www.google-analytics.com/',
      'https://adservice.google.com/',
      'https://ajax.googleapis.com/',
      'https://apis.google.com/',
      'https://unpkg.com/',
    ],
    'style-src': <String>[
      "'self'",
  
negative.code: }
  
  final _none = <String>["'none'"];
  final _contentSecurityPolicyMap = <String, List<String>>{
    'child-src': _none,
    'connect-src': <String>[
      "'self'",
      'https:',
    ],
    'default-src': _none,
    'frame-src': [
      "'self'",
  