General Questions

Hello Waqas , As explained here that for security reasons, you can no longer embed content from external domains in dashboards. To embed external content in dashboards, you must edit the instanceconfig.xml file.

Note: You can accept embedding content from all external domains or from specific domain. Each has it’s different configuration.

In case you need to embed an external content from all domains into your dashboard, so the DBA has to make the following changes in the presentation server :

• Make a backup from file ( <DOMAIN_HOME>/config/fmwconfig/biconfig/OBIPS/instanceconfig.xml ).
• Edit the original file and add the ContentSecurityPolicy element inside the Security element like below:

<ServerInstance>
...
<Security>
...
<InIFrameRenderingMode>allow</InIFrameRenderingMode>
<ContentSecurityPolicy>
<PolicyDirectives>
<Directive>
<Name>child-src</Name>
<Value>'self' www.zzz.com www.yyy.com</Value>
</Directive>
<Directive>
<Name>img-src</Name>
<Value>'self' www.zzz.com www.yyy.com</Value>
</Directive>
</PolicyDirectives>
</ContentSecurityPolicy>
...
</Security>
...
</ServerInstance>

• Save the file and restart the presentation server component (obips1).

Note: If you have notice from the configuration above there is a word (self) between single quote, this one if you didn’t specified, you will accept the external content but you will also preventing you from accessing an internal sources. So to be able to embed both external and internal you have to write this word before the domain. Also another important note that if you type * between <value>*</value> means you can embed both internal and external content inside your dashboard. in this case no need to write the word ‘self’.

Please do this on test environment first to make sure that everything is correct.