We love Widgets in Zoho CRM!
And in our experience they have become an essential tool for extending the feature set and providing a rich user experience beyond standard CRM UI, functionality and integrations.
BUT BEWARE...
If you are thinking of adding a Widget or Marketplace Extension to your CRM, please make sure you perform thorough due-diligence checks and, if possible, have the code vetted by a competent developer in a sandbox environment before adding to your live CRM.
We've spent a couple hours this morning building a Proof-Of-Concept that utilises two standard Widget SDK methods to harvest and share OAuth and Bearer tokens - providing remote API access to CRM, Workdrive and other connected services.
It's a small script that's easily hidden within a Widget codebase, and is not immediately obvious if your security checks focus on looking for "phone home" network traffic.
===================
Powered by Haiku
===================