Security-focused websites lock down their Content Security Policy by removing 'unsafe-inline' from style-src. Until now that broke the chat widget: the styles it injects into the page were blocked, leaving a bare, unstyled button instead of your chatbot. The widget loader now supports CSP nonces. Pass your page's per-request nonce to the embed script and the widget applies it to everything it injects, so it works under the strictest policy with no 'unsafe-inline' required:

Ready to automate your customer service with AI?

Join 1,000+ businesses across SaaS, e-commerce, and agencies automating their customer service and other tasks with a custom-trained AI agent.

Create Your AI Agent No credit card required