Code warning in dev tools

[Cubist]

Description:

• When testing a custom visual in the PBI web portal, PBI's JavaScript is exceeding the safe limit for total size of domain cookies.

How/Why is it bad:

• Even though RFC 2109 mentions higher limits, the practical limits are much lower and are described here: http://stackoverflow.com/questions/5381526/what-are-the-current-cookie-limits-in-modern-browsers
• Dec 2016 Chrome added a console warning for this that is now showing up while using the PBI site.  The Chrome warning is "Set-Cookie header is ignored in response from url: https://app.powerbi.com/tokenRefresh?ver=1493213246999. Cookie length should be less then or equal to 4096 characters."

Where:

• Below is an example in Power BI code that is part of the issue.  This cookie is about 2k in size, but keep in mind the total for the domain is what causes problems.

Url:   app.powerbi.com/groups/me/reports/<some guid>/ReportsSection

File:  ai.0.js   (this is the minimized name)

Code  (line 24):

window.parent.powerBIAccessToken = 'eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImEzUU4wQlpTN3M0bk4tQmRyamJGMFlfTGRNTSIsImtpZCI6ImEzUU4wQlpTN3M0bk4tQmRyamJGMFlfTGRNTSJ9.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.XBI2XdoKyrnSNecL69yh-fM-e772mIrAuL6vRPekAMQUfBtiv-kzLBJeuEm9DwH-r-geXv_Fcy6RE_0B4feu6k7iZBfuONGnQygrcGyExwpzUxlPy_l3T00KJhy93Fz9W_EjJQLByof-ZFm-7gCFb1wa4fdgvvBcafQvVvag5QA6LmgBhaaoY2pq238RWsILsmy1bkAIvSfaallLVYYtcrzJyyS9RqH_zKGV-sXTRbeZizvYiq8H_STVWNEccPflgHLqnwEZ2RRE_-g00VSKVkfSobTDqkGESGgtJ43yrXKs-on2qG328uoSKLmK8CEjWUcZHQFMs_h7lnR6OVVqKg';
window.parent.powerBIAccessTokenExpiry = '2017-04-26 14:42:26Z';

[v-qiuyu-msft]

Hi @Cubist,

Does the limit for total size of domain cookies lead to any detail issues?

Best Regards,
Qiuyun Yu