What is the IFrame target origin for embedding PowerBI dashboard

[cmgchess]

I'm using the PowerBI REST API along with ADAL.js and getting Dashboards. I want to embed a Dashboard in an IFrame. I'm using Angular.JS
So what did was something like this. Notice I have used "*" as the IFrame Target Origin. dashboardEmbedUrl is obtained from the API call

<iframe id="PBDashboard" ng-show="dashboardVisible" src="{{dashboardEmbededUrl}}" frameborder="0" style="height: 100vh; width: 100%"></iframe>

and in my controller

var iframe = document.getElementById("PBDashboard")
const loadIframeDashboardEventListner = function() {
    const token = localStorage.getItem('adal.access.token.keyhttps://analysis.windows.net/powerbi/api');
    iframe.contentWindow.postMessage(JSON.stringify({
        action: "loadDashboard",
        accessToken: token
    }), "*") //target is *. what should be the specific URL needed here
}

and

iframe.addEventListener("load",loadIframeDashboardEventListner);

This works perfectly fine but using "*" triggers a security warning in SonarCloud. It says to specify a target. I'm not sure what the target should be. The API call also gives a webUrl along with the embedUrl. I used the webUrl instead of the "*" and it rendered the IFrame data but also gave the following error in console

[v-shex-msft · Accepted solution]

Hi @cmgchess,

AFAIK, the basic embedded processing required token, permission, embed URL, embedded content id, and content type.

Understanding the different embedding solutions in Power BI embedded analytics | Microsoft Docs

I think this part may match with the 'embed URL' which you configure in the embed configurations.

In addition, you can also take a look at the following link about power bi embedded playground which shares the online sandbox with code snap if helps:

Power BI Playground - Developer Sandbox

Regards,

XIaoxin Sheng