[GitHub] [superset] jean-baka commented on issue #23485: Embedding charts

["jean-baka (via GitHub)" <gi...@apache.org>]

jean-baka commented on issue #23485:
URL: https://github.com/apache/superset/issues/23485#issuecomment-1535901423

   OK, but @eschutho kindly note we humbly disagree on your "which isolates the chart content and does not expose any data sources", which is also present in the [Preset docs](https://preset.io/blog/feature-flags-in-apache-superset-and-preset/). For instance, if I then get the URL of the iframe itself as `XXXX/superset/explore/p/Gpr7VLoz4bn/?standalone=1&height=400`, immediately rewritten into `XXXX/superset/explore/?form_data_key=CYG3Zfmw7IYHmRXLZppIO-59C3TfOb9L_QWqOpt4jSQsb28UcAJ8nU4_hvJP7DDi&slice_id=628&standalone=1&height=400` showing the same embed standalone in the page, and then trim the tail of the URL by removing the `&standalone=1&height=400`, you get access to the full underlying dataset and are able to edit the visualization, etc. How is that not "exposing the data source"?
   
   Can't Superset just export to the iframe the necessary data to display the chart, and nothing else?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org