Add ability to only enable specific tags

[tsteur]

Currently, we have the ability to disable some tags. However, as new tags are added, this becomes a risk again that newly created tags become available.

For example, we may only want to allow “Matomo Analytics” tags. Or we want to allow a bunch of other tags but not Google Tags, Ads tags, ...

This way, as CIO / CTO / CISO / Privacy Officer you can let the marketing team or other teams allow to use the tag manager without worrying about what they may embed. This way, you can better enforce that new tags will need to be approved.

[snake14]

Thank you for creating this issue @tsteur . I believe that you're talking about the disable_tags config. Am I correct in my understanding that you now want something like a allow_tags config and only the tags listed in that config will be allowed, kind of like a "whitelist" to go with the existing "blacklist"?

[tsteur]

@snake14 exactly. We need a feature like allow_tags to define an allow list. The disable_tags isn't really usable because new tags may be added with a release and they wouldn't be blocked (and likely nobody would remember to check this and block the new ones)