Embedded Tableau iFrame CORs dashboard error: Requests to the server have been blocked by an extension

Products

• Clarity PPM On Premise
• Clarity PPM SaaS

Issue/Introduction

1. You have a Tableau dashboard embedded in an iFrame in an HTML portlet
2. When testing in a browser that is non chrome without the extension you're not seeing the embedded dashboard.
3. On the application side, you see error:
   • Requests to the server have been blocked by an extension instead of data in the dashboard
4. Error seen in Developer tools console:

ext.min.js:26 Refused to frame 'https://<ImpactedURL>/' because it violates the following Content Security Policy directive...

Environment

Release : All Supported Releases

Cause

This is due to one or more options missing from the CONTENT_SECURITY_DOMAINS table

Resolution

1. Reproduce issue with Developer Tools enabled for the Browser
   • Note the URL impacted via the following error: ext.min.js:26 Refused to frame 'https://<ImpactedURL>/' because it violates the following Content Security Policy directive.
2. Add anything referenced in the Developer tools error that it "refused to Frame" to the CONTENT_SECURITY_DOMAINS table.
   • In the example above:
     • Run command: admin system-options -add CONTENT_SECURITY_DOMAINS <ImpactedURL> -multi
3. Flush the Clarity Cache

Tip: To check which options are already added in the database, run the query:

select * from cmn_option_values where option_id in
( select id from cmn_options where option_code ='CONTENT_SECURITY_DOMAINS')