Forum Discussion

muy's avatar
muy
Frequent Visitor
9 years ago

Add "allow-same-origin" value to iframe's attribute sandbox

I'm developing a custom visual for map visualization and encounter the following error: 

 

"Uncaught DOMException: Failed to read the 'sessionStorage' property from 'Window': The document is sandboxed and lacks the 'allow-same-origin' flag."

 

So is there anyway to add the "allow-same-origin" flag to the iframe that load my visual?

Need Help

9 Replies

  • ryanbaumann's avatar
    ryanbaumann
    Frequent Visitor
    9 years ago

    I could use this as well.  I receive this error in the console while developing any Custom Visual using Chrome v60.

    • v-viig's avatar
      v-viig
      Community Champion
      9 years ago

      Power BI Custom Visuals API doesn't allow to use local storage, session storage and cookie due to security aspects.

      You might keep a session in Power BI capabilities' properties.

       

      Ignat Vilesov,

      Software Engineer

       

      Microsoft Power BI Custom Visuals

      [email protected]

  • Cubist's avatar
    Cubist
    Advocate II
    8 years ago

    There is good news and bad news.  

     

    The bad news is that what you're asking for, adding the "allow-same-origin" permission to sandboxed visuals, has a snowballs chance in hell of happening.  It's considered by many to be risky from a security perspective, and Microsoft has to have insane vigilence around security, I can't see them ever doing this.

     

    The good news is there are workarounds for these limitations, one of them might allow you to still meet your goal.  I've been wanting to get around to blogging about PBI sandboxing, and developing custom visuals in general, maybe something like Power BI Custom Visuals In-Depth, but you know it's tough to get free time...

     

    What I would suggest in your case is to let us know, why you want to use session storage?  What user level requirement is driving it?  That way people here can offer suggestions on how to achieve what you need technically while perserving the experience for your end users.

    • ryanbaumann's avatar
      ryanbaumann
      Frequent Visitor
      8 years ago
      Thanks for replying! I managed to get this to work without needing the allow-same-origin flag. My custom visual is here https://github.com/ryanbaumann/mapboxgl-powerBI.

      The solution did not have to do with the allow same origin flag. Instead I had an error that was not written to the debug console which caused the custom visual to not load properly. I still see the allow same origin error, but it does not effect my app.

      Thank you!