Strict Content-Security-Policy
This page forbids inline styles, inline scripts and every network request, and enforces Trusted Types. It is deliberately unstyled, because its own inline styles would be blocked too.
The widget should still appear fully styled in the corner, every control should work, and the browser console should show no policy violations.