secure widgets.js