We have created a Second Generation Managed Package and in it we need to load the static resource which is uploaded by the Subscriber (the one who installs the package).
We have loaded the static resource using the URL approach (
/resource[/timestamp]/YourStaticResourceName) mentioned in this link
And In one LWC Component, we have a requirement of Custom Datatype of Lightning Datatable. So we have used a Custom Component for Custom Datatype and for passing data from Custom Component to our Lightning Datatable Component we have used Custom Event with bubbles and composable parameters set as true and In the Datatable Event Handler, we have stopped the event propagation, so that the custom event doesn't pass or propagate behind the Datatable Component and stays in the Managed Package Boundary.
Will these approaches pass the Salesforce AppExchange Security Review?