Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
7 years ago

Validate URL Filter

I'm embedding reports using a URL filter to only show the data that the user is supposed to see.  An iFrame with a url source is easy to manipulate and therefore a vulnerability so i've been testing...
bad request
Filter
URL
Validation
Anonymous's avatar
Anonymous
Not applicable
7 years ago

Yes, I need to look at RLS.

 

No I parse the URL looking for specific IDs which I then authorize using my security extension. But of course that could've been a real security miss.

 

Thank you!

Anonymous's avatar
Anonymous
Not applicable
6 years ago

Anonymous   I've been tasked with parsing the Power BI URL and can't figure out how to do it.  Do you mind sharing how you achieved this?

 

(Essentially, there is a button in the Power BI report that links to additonal information, and I want to read the Power BI URL for a variable in there that will be used to create the dynamic link in the button).

 

Thanks! 

  • Anonymous's avatar
    Anonymous
    Not applicable
    6 years ago

    Not sure I understand what you mean but i simply just extract the URL from the IRSRequestContext and then do string validation on it using regex and other rules specificly for my purpose.

    I do this in my implementation of IAuthenticationExtension2.GetUserInfo