Content Security Policy and analytics service

Hello!

I want to use a service for site analytics. Main script set by google tag.

Now I need to add reading permission to access for service in the HTTP header

Can I do it on Shopify or not? and where?

my part of code looks like

Content-Security-Policy: frame-src blob: https://mc.yandex.com;