MEmetabase
/api/ee/custom-viz-plugin

GET /api/ee/custom-viz-plugin/sandbox-host

Changed on

Serve a minimal HTML document used as the iframe src for the near-membrane custom-viz sandbox. The response carries a per-document Content-Security-Policy that permits 'unsafe-eval' only inside this iframe, so the main Metabase document keeps its strict nonce-based CSP. 404s unless the custom-viz kill switch is on and the request passes the fetch-metadata gate (see [[donor-load-allowed?]]).

get/api/ee/custom-viz-plugin/sandbox-host

Request

  • Base URL
    (relative, and the document was published on a file host, not at the API’s origin)
  • Auth
    API key in header X-API-Key

Request body

object required

Response

Successful response

unknown required

Changes