Requesting widget implementation as a Web Component due to the following reasons: The main issue with the current implementation of the widget is that it gives the Document360 widget full access, both script-wise (JavaScript) and style-wise (CSS). This can lead to application breakage (intentionally or unintentionally), data theft, and other security risks. Several CSP rules are allowed, but these primarily apply to scripts. However, the application is forced to use ‘unsafe-inline’ styles generated by your script. Requirement: Implement the widget as a Web Component with a “closed” mode ShadowRoot. This approach will ensure the isolation of your widget from the rest of the application, preventing any styles or scripts from leaking into the main application. Reference links: Web Components - https://developer.mozilla.org/en-US/docs/Web/API/Web_components ShadowRoot.mode - https://developer.mozilla.org/en-US/docs/Web/API/ShadowRoot/mode