Content Security Policy

[richxcame]

I don't know about Security Policy. I am nuxtjs universal mode (SSR). When I implement docs I have this in console:

[Report Only] Refused to load the script 'https://www.google-analytics.com/analytics.js' because it violates the following Content Security Policy directive: "script-src 'self' 'sha256-/aKBpkmyVzr5UQv8vQ3zLZb6zmB6mSTU/fZVQ7KO42g='". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

But I have in nuxt.config.js:
render: {
csp: true
},