Forum Discussion
Add "allow-same-origin" value to iframe's attribute sandbox
There is good news and bad news.
The bad news is that what you're asking for, adding the "allow-same-origin" permission to sandboxed visuals, has a snowballs chance in hell of happening. It's considered by many to be risky from a security perspective, and Microsoft has to have insane vigilence around security, I can't see them ever doing this.
The good news is there are workarounds for these limitations, one of them might allow you to still meet your goal. I've been wanting to get around to blogging about PBI sandboxing, and developing custom visuals in general, maybe something like Power BI Custom Visuals In-Depth, but you know it's tough to get free time...
What I would suggest in your case is to let us know, why you want to use session storage? What user level requirement is driving it? That way people here can offer suggestions on how to achieve what you need technically while perserving the experience for your end users.
The solution did not have to do with the allow same origin flag. Instead I had an error that was not written to the debug console which caused the custom visual to not load properly. I still see the allow same origin error, but it does not effect my app.
Thank you!