2 ms·

What does tag manager even do?

• cj 4y ago
  1) Developer installs Google Tag Manager at the request of someone in marketing 2) Marketing department has free reign (via Google Tag Manager) to add arbitrary javascript on any page with Google Tag Manager installed. Namely tracking scripts, adwords conversions, retargeting pixels, or really any arbitrary javascript without limitation. Edit: Google Tag Manager can also be used to inject scripts that aren't inherently bad, like a 3rd party support/chat widget (Zendesk, Intercom, etc)
  • nashashmi 4y ago
    I have it blocked all the time. Now I understand why some websites don’t work until I put it on. This is nefarious.
  • TheNewsIsHere 4y ago
    What I hate is that because it can be used for shady and benign purposes, you can never tell what will break without it. I’d love to wholesale block or at the edge or host but sometimes you need it.
  • Animats 4y ago
    It's worse than that. Attackers can add arbitrary Javascript to your pages. It takes another vulnerability to use this as a large scale exploit, but it's been done. [1][2] Blocking "googletagmanager.com" does break a few sites, but not enough that it matters. [1] https://support.google.com/tagmanager/answer/6328489?hl=en https://support.google.com/tagmanager/answer/6328489?hl=en [2] https://www.akamai.com/blog/security/magecart-attack-disguised-as-google-tag-manager https://www.akamai.com/blog/security/magecart-attack-disguis...
• arealaccount 4y ago
  Its basically a tool that lets you manage all of the js tracking scripts (tags) that advertisers, affiliates, etc have you paste into a website. So instead of having a million js snippets on your page, you have one google tag manager snippet and then your marketing team can inject 400mb of javascript into the site without bothering dev.