Viewer API demo development only, not shipped

Two independent viewers mounted from the script API (mount, update, destroy) under script-src 'self'; style-src 'self'. CSP violations seen: 0.

After destroy, press mount and then update: a freshly mounted viewer holds no data and says so until it gets some.

not mounted
not mounted