KNOWLEDGE BASE

Filter use on iFrame embedded view causes Exception Thrown error


Published: 24 Dec 2015
Last Modified Date: 12 Mar 2017

Issue

When engaging a filter on a view embedded via iframe an "Exception thrown and not caught" error is encountered after upgrading to Tableau Server 9.2

User-added image

Environment

  • Tableau Server 9.2
  • Windows Server 2012
  • MS SQL Server

Resolution

Either:

1. Remove this line of code from the iframe code: <META HTTP-EQUIV=" X-FRAME-OPTIONS" CONTENT="DENY"> 

2. Use the JavaScript API to embed the view instead of iframe.

Cause

This issue is caused between a conflict between 9.2 and a line of code (<META HTTP-EQUIV=" X-FRAME-OPTIONS" CONTENT="DENY">) in the iframe that is new to Tableau Server 9.2. The aforementioned line of code is recommended by OWASP to prevent clickjacking, so it's use is somewhat common. Removing the line of code does expose the view to clickjacking, so if that is a concern it is recommended to use the JavaScript API to embed the code instead of iframe.
Did this article resolve the issue?