06 · Strict CSP. style-src 'self' with no 'unsafe-inline', so inline <style> and style="" attributes are both blocked. PASS: the widget still renders and is still styled — constructable stylesheets are not inline styles. Watch for: any surface that depends on inline style attributes for layout or animation.