With all these explanations about web components, shadow DOM etc., there is a suspicious lack of any mention about CSPs. I'm just not understanding how these proposed web components can work well with any kind of reasonable CSP.
Surely all the CSS shown in the examples would not run because they are inline CSS. Therefore, the options I can see are:
Import a CSS file for every component (results in potentially dozens of extra network requests).
Page Affected: https://developers.google.com/web/fundamentals/web-components/shadowdom
What needs to be done?
With all these explanations about web components, shadow DOM etc., there is a suspicious lack of any mention about CSPs. I'm just not understanding how these proposed web components can work well with any kind of reasonable CSP.
Surely all the CSS shown in the examples would not run because they are inline CSS. Therefore, the options I can see are: