How to make gtm.js SPFX integration work with the new Content Security Policy (CSP)?

sharepoint google-analytics google-tag-manager content-security-policy spfx