Kibana 6.7+ does not support embedding kibana dashboard in iframe？

[guot626]

I have a plugin,it wants to embed kibana dashboard in iframe form, but now there are the following problems. Doesn't kibana6.7+ support embedding kibana dashboard in iframe form?Is there any solution to this problem?There is no problem with this plugin in 6.4 and 6.5. @epixa
thank you!

[elasticmachine]

Pinging @elastic/kibana-security

[timroes]

Thanks for the report. Since the error message is cut off, could you perhaps also copy the text of it into the issue description (feel free to strip the domain part also there).

[kobelb]

Hey @guot626, if I understand correctly you have a plugin for Kibana which is using an iframe to render a specific dashboard or saved search? If so, you'll want to set the nonce attribute of the iframe based on the window.__kbnNonce__ like we do here

[guot626]

@timroes Thanks for your reply.the issue description :Refused to frame 'http://localhost:5601/app/kibana#/dashboard/d2a251f0-3bea-11e9-9a8e-a1b07cfe62fe?embed=true&_g=(refreshInterval%3A(pause%3A!f%2Cvalue%3A10000)%2Ctime%3A(from%3Anow%2Fw%2Cmode%3Aquick%2Cto%3Anow%2Fw))' because it violates the following Content Security Policy directive: "child-src blob:". Note that 'frame-src' was not explicitly set, so 'child-src' is used as a fallback.

[kobelb]

Closing this issue, the solution has been provided in #39142 (comment)