anchor.diff:    'media-src': _none,
     'object-src': _none,
     'script-src': <String>[
  -    "'self'",
  +    // See: https://developers.google.com/tag-manager/web/csp
  +    "'self'",
  +    'https://tagmanager.google.com',
       'https://www.googletagmanager.com/',
       'https://www.google.com/',
       'https://www.google-analytics.com/',
  +    'https://ssl.google-analytics.com',
       'https://adservice.google.com/',
       'https://ajax.googleapis.com/',
       'https://apis.google.com/',
       'https://unpkg.com/',
  +    'https://www.gstatic.com/',
  +    'https://apis.google.com/',
  +    'https://gstatic.com',
     ],
     'style-src': <String>[
       "'self'",
  
positive.code: }
  
  final _none = <String>["'none'"];
  final _self = <String>["'self'"];
  
  final _contentSecurityPolicyMap = <String, List<String>>{
    'child-src': _none,
    'connect-src': _self,
    'default-src': _none,
    'frame-src': [
      "'self'",
  
negative.code:   ],
    'font-src': <String>[
      "'self'",
      'data:',
      'https://fonts.googleapis.com/',
      'https://fonts.gstatic.com/',
    ],
  