Request header origin is "null" on portal

[vincent_1234]

Dear all,

I'm developing a custom visual which makes an ajax call.

Because this is cross domain, I have to regulate the "Access-Control-Allow-Origin" header in my service, but I do not want to wildcard this.

My visual works just great in the devtools and the power bi designer, however when I publish the report to the server, the request fails. When I open up F12 tools I can see more of those requests failing, for me for a strange reason.

The request header "Origin" is "null".

This is strange as this should be the base address of the portal and can't even be modified by javascript.

What is causing this?

Thanks in advance

[junesoo]

This is because the custom visual iframe is sandboxed and it doesn't have allow-same-origin.

There's nothing you can do really, at least nothing that I know of.