Power BI Embedded - iframe sandbox attribute

[Anonymous]

When using Power BI Embedded (AppOwnsData), Power BI artifact is embedded into an iframe in the application. The iframe which is created to embed the report doesn't have the sandbox attribute. Risk associated with an iframe can be reduced by adding the sandbox attribute to iframes that will allow to grant only necessary privileges for the content. Why is sandbox attribute not added in the Power BI Embedded iframe? And is there any way where application teams can add the sandbox attribute to the iframe to improve the security?

Reference to sandbox attribute - https://docs.microsoft.com/en-us/previous-versions/msdn10/hh563496(v=msdn.10) 

@developer 

[lbendlin]

If this is important to you please consider raising it at https://ideas.powerbi.com

[michalkopecky]

Hi,

I created the PR https://github.com/microsoft/PowerBI-JavaScript/pull/385  with adding the sandbox attribute into your library