React itself can be fine, but most of the ecosystem doesn't. Next.JS: https://github.com/vercel/next.js/issues/256 https://github.com/vercel/next.js/issues/256

React itself can be fine, but most of the ecosystem doesn't. Next.JS: https://github.com/vercel/next.js/issues/256 https://github.com/vercel/next.js/issues/256 Gatsby: https://github.com/gatsbyjs/gatsby/discussions/10890 https://github.com/gatsbyjs/gatsby/discussions/10890 Create React app (a solution exists, but is not enabled by default): https://stackoverflow.com/questions/58354362/inline-script-because-it-violates-the-following-content-security-policy-directiv https://stackoverflow.com/questions/58354362/inline-script-b... Google tag manager involves jumping through hoops the people running GTM usually won't jump through: https://developers.google.com/tag-manager/web/csp https://developers.google.com/tag-manager/web/csp