Images are getting blocked due to Content-Security-Policy when using the PBI certified visuals

[VS_CHP]

Hi,

I have started getting the "Refused to load image" error as shown below from probably 01/06/2024, however it was working perfectly earlier. The issue is with Power BI restricting the content from external resources even while using the PBI certified third party visuals (e.g. HTML Content (lite), Image by CloudScope etc.). I couldn't find any settings in the Power BI Admin Centre to configure the "Image-src", "Style-src" etc. parameters for the CSP.

Eventhough the images I am using are from our own Azure Blob Storage and are public, we are still getting the error. I am not sure if at all there is an option to configure the "CSP" policy to allow/whitelist certain domains which are internal to us and let Power BI know to not apply the CORS or any X-XSS restriction.

Any help regarding this is greatly appreciated. Thank you!!

[Anonymous · Accepted solution]

Hi @VS_CHP 

Direct configuration of CSP within Power BI itself, specifically for adjusting directives like img-src or style-src is not available. Power BI's handling of CSP is primarily managed internally to ensure the platform's security.

Best Regards,

Jayleny

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[foodd]

@Anonymous , thank you for clearly and simply addressing a topic that is not often discussed.

[VS_CHP]

Thank you! @Anonymous