jean-baka commented on issue #23485: URL: https://github.com/apache/superset/issues/23485#issuecomment-1535901423
OK, but @eschutho kindly note we humbly disagree on your "which isolates the chart content and does not expose any data sources", which is also present in the [Preset docs](https://preset.io/blog/feature-flags-in-apache-superset-and-preset/). For instance, if I then get the URL of the iframe itself as `XXXX/superset/explore/p/Gpr7VLoz4bn/?standalone=1&height=400`, immediately rewritten into `XXXX/superset/explore/?form_data_key=CYG3Zfmw7IYHmRXLZppIO-59C3TfOb9L_QWqOpt4jSQsb28UcAJ8nU4_hvJP7DDi&slice_id=628&standalone=1&height=400` showing the same embed standalone in the page, and then trim the tail of the URL by removing the `&standalone=1&height=400`, you get access to the full underlying dataset and are able to edit the visualization, etc. How is that not "exposing the data source"? Can't Superset just export to the iframe the necessary data to display the chart, and nothing else? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
