Query on iFrame Sandbox Permissions for Custom Visuals in PowerBI ( "allow-scripts" permission)

Hi jeromexshi,

All you can do to get successful responses from an endpoint is if the Access-Control-Allow-Origin response header is configured as * or null (as custom visuals have a null origin due to the sandbox impositions). If you cannot work to these constraints, then there is currently no known workaround.

If these have been set, then HTTP(S) endpoints should be callable per usual JS fetch methods.

Regards,

Daniel