The widget already has some registration process, that process could whitelist the content view for ajax.