Evan Rusackas
a0cf798409
fix(embedded): add Sec-Fetch-Dest defense-in-depth check on the embedded view ( #40667 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-09 11:08:08 -07:00
Evan Rusackas
fa41769a08
fix(embedded): enforce configured allowed domains for postMessage origin ( #40629 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-02 22:58:30 -07:00
Hex Café
5c9a79442c
fix(embedded): add missing GUEST_TOKEN_HEADER_NAME to bootstrap data ( #28932 )
2024-06-05 18:58:38 -07:00
Eyal Ezer
07b2449bd7
refactor: Unify all json.(loads|dumps) usage to utils.json ( #28702 )
...
Co-authored-by: Eyal Ezer <eyal.ezer@ge.com >
2024-05-28 14:17:41 -07:00
Eyal Ezer
56f0fc4ec2
refactor: Migration of json utilities from core ( #28522 )
...
Co-authored-by: Eyal Ezer <eyal.ezer@ge.com >
2024-05-20 10:27:22 -07:00
Jack Fragassi
630734b908
fix: Prevent cached bootstrap data from leaking between users w/ same first/last name ( #26023 )
2023-11-21 15:39:42 -08:00
John Bodley
3e76736874
chore(dao): Organize DAOs according to SIP-92 ( #24331 )
...
Co-authored-by: JUST.in DO IT <justin.park@airbnb.com >
2023-06-18 18:32:32 -07:00
EugeneTorap
4a828f57f4
chore: Update mypy and fix stubs issue ( #24033 )
2023-05-12 08:47:14 +01:00
Usiel Riedl
d5ecfbb901
fix(embed): fix server error due to breaking change on flask-login ( #22462 )
...
Co-authored-by: Usiel Riedl <usiel.riedl@automattic.com >
2023-01-12 11:48:01 +02:00
Bogdan
44654e5abc
perf: Memoize the common_bootstrap_payload and include user param ( #21018 ) ( #21439 )
...
Co-authored-by: Bogdan Kyryliuk <bogdankyryliuk@dropbox.com >
2022-09-13 08:52:08 -07:00
Lily Kuang
f53018c7c5
feat(embedded): enforce allow domains ( #20251 )
...
* feat(embedded): enforce allow domains
* check referrer in view
* remove frontend check
2022-06-17 12:57:51 -07:00
David Aaron Suddjian
8e29ec5a66
feat: Embedded dashboard configuration ( #19364 )
...
* embedded dashboard model
* embedded dashboard endpoints
* DRY up using the with_dashboard decorator elsewhere
* wip
* check feature flags and permissions
* wip
* sdk
* urls
* dao option for id column
* got it working
* Update superset/embedded/view.py
* use the curator check
* put back old endpoint, for now
* allow access by either embedded.uuid or dashboard.id
* keep the old endpoint around, for the time being
* openapi
* lint
* lint
* lint
* test stuff
* lint, test
* typo
* Update superset-frontend/src/embedded/index.tsx
* Update superset-frontend/src/embedded/index.tsx
* fix tests
* bump sdk
2022-03-30 12:34:05 -07:00
