1/* Google Consent Mode v2 defaults. 2 3 This MUST run before any Google tag loads, which is why it is a plain 4 blocking <script src> at the very top of <head> on every page. 5 6 It lives in its own file rather than inline so the site can ship a strict 7 Content-Security-Policy without 'unsafe-inline' for scripts. An inline 8 block would have forced that allowance open, which is exactly the hole an 9 injected script needs. 10 11 Everything starts denied. script.js flips these to granted only when the 12 visitor presses Accept in the banner. */ 13window.dataLayer = window.dataLayer || []; 14function gtag() { dataLayer.push(arguments); } 15gtag("consent", "default", { 16 ad_storage: "denied", 17 ad_user_data: "denied", 18 ad_personalization: "denied", 19 analytics_storage: "denied", 20 functionality_storage: "granted", 21 security_storage: "granted", 22 wait_for_update: 500 23});
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.