Forum Discussion
Power BI Embedded - iframe sandbox attribute
When using Power BI Embedded (AppOwnsData), Power BI artifact is embedded into an iframe in the application. The iframe which is created to embed the report doesn't have the sandbox attribute. Risk associated with an iframe can be reduced by adding the sandbox attribute to iframes that will allow to grant only necessary privileges for the content. Why is sandbox attribute not added in the Power BI Embedded iframe? And is there any way where application teams can add the sandbox attribute to the iframe to improve the security?
Reference to sandbox attribute - https://docs.microsoft.com/en-us/previous-versions/msdn10/hh563496(v=msdn.10)
2 Replies
If this is important to you please consider raising it at https://ideas.powerbi.com
Hi,
I created the PR https://github.com/microsoft/PowerBI-JavaScript/pull/385 with adding the sandbox attribute into your library
