Skip to content

Docs - Custom HTML header tags: Adding Google Tag Manager (GTM) with nonce

I was reading this page, so I tried to add GTM script to my self-compiled GitLab.

The script is something like this as mentioned in this article:

<!-- Google Tag Manager -->
<script nonce='{SERVER-GENERATED-NONCE}'>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;var n=d.querySelector('[nonce]');
n&&j.setAttribute('nonce',n.nonce||n.getAttribute('nonce'));f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-XXXXXX');</script>
<!-- End Google Tag Manager -->

In CSP config I need to set this:

script-src 'nonce-{SERVER-GENERATED-NONCE}';

but I do not have access to dynamic nonce generated by GitLab in gitlab.yml

Edited by 🤖 GitLab Bot 🤖