Can't embed instagram post on custom plugin visualization

Elastic Stack Kibana
1

I am creating a kibana plugin that embeds an instagram post and receiving this error:

C:\Users\User\Documents\Projects\kibana\plugins\kbn_tp_custom_visualizations\node_modules\react-instagram-embed\lib\index.js:135 Refused to load the script 'http://platform.instagram.com/en_US/embeds.js' because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'nonce-CqL6nSDD5P//hIcm'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

I am aware that i need to add a csp rule to the kibana.yml file, i have tried the following:

2

@Jessica_Langanz,

Welcome to our community!

Let me see if @Larry_Gregory can help out with this.

Thanks,
Liza

1 Like
3

Hi Jessica,

I think you may have had trouble because Kibana needs the script-src directive to have both 'unsafe-eval' and 'self'.

Try adding this to your kibana.yml file:

csp.rules:
 - "script-src 'unsafe-eval' 'self' https://platform.instagram.com/en_US/embeds.js"

Note, the rule uses the "HTTPS" version of that URL, which is highly recommended. You should update your plugin to use that as well.

Hope that helps,
-Joe

2 Likes
4

Thank you, it is working now!

I have also figured out that the lib that i am using react-instagram-embed makes requests on both HTTP's and HTTPS's version of that url, that was confusing me too.

TY

-Jess

2 Likes
5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.