This version did not pass the review because of the following issues:

1. Your custom CSP allows remote-script injection which is not allowed.

Please fix them and submit again. Thank you.

Please note the following for the next update:

1. Unsafe assignment to innerHTML

Due to both security and performance concerns, this may not be set using dynamic values which have not been adequately sanitized. This can lead to security issues or fairly serious performance degradation. e.g:

ref-inject-code-search.js - line: 534

The BottomSheetBehavior link returns a 404:

https://android.googlesource.com/platform/frameworks/support/+/refs/heads/master/design/src/android/support/design/widget/BottomSheetBehavior.java

I believe this source code is not under the main Android Repository, but here:

https://github.com/material-components/material-components-android/blob/master/lib/java/com/google/android/material/bottomsheet/BottomSheetBehavior.java