Streamlit Components, security, and a five month quest to ship a single line of code The story of allow-same-origin
