You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by "tinzisreal (via GitHub)" <gi...@apache.org> on 2026/01/27 06:38:11 UTC
[D] Can i embed list view superset in iframe? [superset]
GitHub user tinzisreal created a discussion: Can i embed list view superset in iframe?
Can i embed list view superset in iframe?
GitHub link: https://github.com/apache/superset/discussions/37464
----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [D] Can i embed list view superset in iframe? [superset]
Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
GitHub user dosubot[bot] added a comment to the discussion: Can i embed list view superset in iframe?
<!-- Answer -->
You can embed Superset's list views (like the dashboards, charts, or datasets list pages) in an iframe, but whether it works depends on your security configuration. Superset uses Flask-Talisman to set security headers, and by default, the Content Security Policy (CSP) may block embedding in iframes unless you explicitly allow it. To enable embedding, you need to set the `frame-ancestors` directive in your `TALISMAN_CONFIG` (in `superset_config.py`) to include the domain(s) where you want to embed Superset pages. There is no special restriction or exemption for list viewsâthey follow the same CSP rules as other Superset pages. Authentication is still required for list views, so users will need to be logged in unless you have made those pages public, which is not typical for list views. The official embedding features and SDK are focused on dashboards, not list views, so you won't get features like guest tokens or standalone rendering for list pages. For more details, see the configu
ration and security docs
[here](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/config.py#L1636-L1674) and
[here](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/initialization/__init__.py#L249-L684).
<!-- Dosu Comment Footer -->
*To reply, just mention [@dosu](https://go.dosu.dev/dosubot).*
---
<sup>How did I do? [Good](https://app.dosu.dev/response-feedback/f8c20f6f-3fd8-4aab-831e-36e7bbbff4bc?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/f8c20f6f-3fd8-4aab-831e-36e7bbbff4bc?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/f8c20f6f-3fd8-4aab-831e-36e7bbbff4bc?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/f8c20f6f-3fd8-4aab-831e-36e7bbbff4bc?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/f8c20f6f-3fd8-4aab-831e-36e7bbbff4bc?feedback_type=hallucination) | [Report đ](https://app.dosu.dev/response-feedback/f8c20f6f-3fd8-4aab-831e-36e7bbbff4bc?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/f8c20f6f-3fd8-4aab-831e-36e7bbbff4bc?feedback_type=other)</sup>
[](https://app.dosu.dev/a28d3c7e-a9d3-459e-9fb6-3a6f9ff4f357/ask?utm_source=github) [](https://cursor.com/link/prompt?text=You%20can%20embed%20Superset%27s%20list%20views%20%28like%20the%20dashboards%2C%20charts%2C%20or%20datasets%20list%20pages%29%20in%20an%20iframe%2C%20but%20whether%20it%20works%20depends%20on%20your%20security%20configuration.%20Superset%20uses%20Flask-Talisman%20to%20set%20security%20headers%2C%20and%20by%20default%2C%20the%20Content%20Security%20Policy%20%28CSP%29%20may%20block%20embedding%20in%20iframes%20unless%20you%20explicitly%20allow%20it.%20To%20enable%20embedding%2C%20you%20need%20to%20set%20the%20%60frame-ancestors%60%20directive%20in%20your%20%60TALISMAN_CONFIG%60%20%28in%20%60superset_config.py%60%29%20to%20include%20the%20domain%28s%29%20where%20you%20want%20to%20embed%20Superset%20pages.%20There%20is%20no%20special%20restriction%20or%20
exemption%20for%20list%20views%E2%80%94they%20follow%20the%20same%20CSP%20rules%20as%20other%20Superset%20pages.%20Authentication%20is%20still%20required%20for%20list%20views%2C%20so%20users%20will%20need%20to%20be%20logged%20in%20unless%20you%20have%20made%20those%20pages%20public%2C%20which%20is%20not%20typical%20for%20list%20views.%20The%20official%20embedding%20features%20and%20SDK%20are%20focused%20on%20dashboards%2C%20not%20list%20views%2C%20so%20you%20won%27t%20get%20features%20like%20guest%20tokens%20or%20standalone%20rendering%20for%20list%20pages.%20For%20more%20details%2C%20see%20the%20configuration%20and%20security%20docs%20%20%0A%5Bhere%5D%28https%3A//github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/config.py%23L1636-L1674%29%20and%20%20%0A%5Bhere%5D%28https%3A//github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/initialization/__init__.py%23L249-L684%29.) [](https://go.dosu.dev/discord-bot) [](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/discussions/37464)
GitHub link: https://github.com/apache/superset/discussions/37464#discussioncomment-15613909
----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [D] Can i embed list view superset in iframe? [superset]
Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
GitHub user dosubot[bot] edited a comment on the discussion: Can i embed list view superset in iframe?
<!-- Answer -->
Yes, you can hide the Superset menu on the chart list, dashboard list, and dataset list views by adding ?standalone=true to the URL. This works because the frontend Menu component checks for the standalone parameter and hides the menu if it's present, not just on dashboards but on any page that uses the Menu componentâincluding these list views. This isn't officially documented or guaranteed to be supported in the future, but it works in current versions as long as the page renders the standard menu component. Other UI elements (like action buttons or filters) are not affected by this parameterâonly the main navigation menu is hidden. You can also use the uiConfig URL parameter with the appropriate bitmask to hide the menu in embedded scenarios if needed. For details, see the relevant frontend code logic [here](https://github.com/apache/superset/blob/master/superset-frontend/src/features/home/Menu.tsx).
<!-- Dosu Comment Footer -->
*To reply, just mention [@dosu](https://go.dosu.dev/dosubot?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=reply-with-mention&utm_term=apache%2Fsuperset).*
---
Share context across your team and agents. Try [Dosu](https://dosu.dev?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-tagline&utm_term=apache%2Fsuperset).
[](https://app.dosu.dev/response-feedback?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-feedback&utm_term=apache%2Fsuperset&message_id=c84a3657-ed99-454f-a7ef-67b09b188e74) [](https://github.dosu.com/apache/superset?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-learn-repo&utm_term=apache%2Fsuperset) [](https://app.dosu.dev/signup?referrer=openSource&source=github-footer&utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-add-team&utm_term=apache%2Fsuperset)
GitHub link: https://github.com/apache/superset/discussions/37464#discussioncomment-15614732
----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [D] Can i embed list view superset in iframe? [superset]
Posted by "tinzisreal (via GitHub)" <gi...@apache.org>.
GitHub user tinzisreal added a comment to the discussion: Can i embed list view superset in iframe?
Can i use standalone for chart list, dashboard list and dataset list view, i want to hide the menu superset. Can i do it?
GitHub link: https://github.com/apache/superset/discussions/37464#discussioncomment-15614724
----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [D] Can i embed list view superset in iframe? [superset]
Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
GitHub user dosubot[bot] edited a comment on the discussion: Can i embed list view superset in iframe?
<!-- Answer -->
You can embed Superset's list views (like the dashboards, charts, or datasets list pages) in an iframe, but whether it works depends on your security configuration. Superset uses Flask-Talisman to set security headers, and by default, the Content Security Policy (CSP) may block embedding in iframes unless you explicitly allow it. To enable embedding, you need to set the `frame-ancestors` directive in your `TALISMAN_CONFIG` (in `superset_config.py`) to include the domain(s) where you want to embed Superset pages. There is no special restriction or exemption for list viewsâthey follow the same CSP rules as other Superset pages. Authentication is still required for list views, so users will need to be logged in unless you have made those pages public, which is not typical for list views. The official embedding features and SDK are focused on dashboards, not list views, so you won't get features like guest tokens or standalone rendering for list pages. For more details, see the configu
ration and security docs
[here](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/config.py#L1636-L1674) and
[here](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/initialization/__init__.py#L249-L684).
<!-- Dosu Comment Footer -->
*To reply, just mention [@dosu](https://go.dosu.dev/dosubot?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=reply-with-mention&utm_term=apache%2Fsuperset).*
---
Share context across your team and agents. Try [Dosu](https://dosu.dev?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-tagline&utm_term=apache%2Fsuperset).
[](https://app.dosu.dev/response-feedback?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-feedback&utm_term=apache%2Fsuperset&message_id=f8c20f6f-3fd8-4aab-831e-36e7bbbff4bc) [](https://github.dosu.com/apache/superset?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-learn-repo&utm_term=apache%2Fsuperset) [](https://app.dosu.dev/signup?referrer=openSource&source=github-footer&utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-add-team&utm_term=apache%2Fsuperset)
GitHub link: https://github.com/apache/superset/discussions/37464#discussioncomment-15613909
----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [D] Can i embed list view superset in iframe? [superset]
Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
GitHub user dosubot[bot] added a comment to the discussion: Can i embed list view superset in iframe?
<!-- Answer -->
Yes, you can hide the Superset menu on the chart list, dashboard list, and dataset list views by adding ?standalone=true to the URL. This works because the frontend Menu component checks for the standalone parameter and hides the menu if it's present, not just on dashboards but on any page that uses the Menu componentâincluding these list views. This isn't officially documented or guaranteed to be supported in the future, but it works in current versions as long as the page renders the standard menu component. Other UI elements (like action buttons or filters) are not affected by this parameterâonly the main navigation menu is hidden. You can also use the uiConfig URL parameter with the appropriate bitmask to hide the menu in embedded scenarios if needed. For details, see the relevant frontend code logic [here](https://github.com/apache/superset/blob/master/superset-frontend/src/features/home/Menu.tsx).
<!-- Dosu Comment Footer -->
*To reply, just mention [@dosu](https://go.dosu.dev/dosubot).*
---
<sup>How did I do? [Good](https://app.dosu.dev/response-feedback/c84a3657-ed99-454f-a7ef-67b09b188e74?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/c84a3657-ed99-454f-a7ef-67b09b188e74?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/c84a3657-ed99-454f-a7ef-67b09b188e74?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/c84a3657-ed99-454f-a7ef-67b09b188e74?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/c84a3657-ed99-454f-a7ef-67b09b188e74?feedback_type=hallucination) | [Report đ](https://app.dosu.dev/response-feedback/c84a3657-ed99-454f-a7ef-67b09b188e74?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/c84a3657-ed99-454f-a7ef-67b09b188e74?feedback_type=other)</sup>
[](https://app.dosu.dev/a28d3c7e-a9d3-459e-9fb6-3a6f9ff4f357/ask?utm_source=github) [](https://cursor.com/link/prompt?text=Yes%2C%20you%20can%20hide%20the%20Superset%20menu%20on%20the%20chart%20list%2C%20dashboard%20list%2C%20and%20dataset%20list%20views%20by%20adding%20%3Fstandalone%3Dtrue%20to%20the%20URL.%20This%20works%20because%20the%20frontend%20Menu%20component%20checks%20for%20the%20standalone%20parameter%20and%20hides%20the%20menu%20if%20it%27s%20present%2C%20not%20just%20on%20dashboards%20but%20on%20any%20page%20that%20uses%20the%20Menu%20component%E2%80%94including%20these%20list%20views.%20This%20isn%27t%20officially%20documented%20or%20guaranteed%20to%20be%20supported%20in%20the%20future%2C%20but%20it%20works%20in%20current%20versions%20as%20long%20as%20the%20page%20renders%20the%20standard%20menu%20component.%20Other%20UI%20elements%20%28like%20action%20butt
ons%20or%20filters%29%20are%20not%20affected%20by%20this%20parameter%E2%80%94only%20the%20main%20navigation%20menu%20is%20hidden.%20You%20can%20also%20use%20the%20uiConfig%20URL%20parameter%20with%20the%20appropriate%20bitmask%20to%20hide%20the%20menu%20in%20embedded%20scenarios%20if%20needed.%20For%20details%2C%20see%20the%20relevant%20frontend%20code%20logic%20%5Bhere%5D%28https%3A//github.com/apache/superset/blob/master/superset-frontend/src/features/home/Menu.tsx%29.) [](https://go.dosu.dev/discord-bot) [](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/discussions/37464)
GitHub link: https://github.com/apache/superset/discussions/37464#discussioncomment-15614732
----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org