Embedding blocked by extension

Hey folks,

I’m trying to embed a sample dashboard that I’ve made to a Python-based web application. When I click on ‘Sharing and Embedding’ and ‘Embed this dashboard in an application’, however, an error pops up where the dashboard is supposed to be, saying:

“Requests to the server have been blocked by an extension.”

I’ve looked at threads related to this error (see bottom of post), however the fixes that they applied haven’t been able to solve the problem, these fixes being updating browsers and changing the https in the URL. The steps I’ve taken so far are:

  • Making sure Chrome is up-to-date
  • Removing all extensions
  • Assigning special site privlidges

Does anyone know what this could relate to?

1 Like

Hi @laurie-bamber
Which version of Metabase?
What messages do you see in the browser console?

Hi Flamber, thanks for the quick reply! I’m not sure about the version I’m using (I assume the latest), but heres the error log appearing in the console:

app-main.bundle.js:5 DEPRECATED: metabase/redux/metadata fetchDatabaseMetadata
v @ app-main.bundle.js:5
vendor.bundle.js?b4d1fbde3b5fca6c1555:1 Refused to frame ‘’ because it violates the following Content Security Policy directive: “child-src ‘self’ https://accounts.google.com”. Note that ‘frame-src’ was not explicitly set, so ‘child-src’ is used as a fallback.

Click the :gear: in the top right corner to show the Settings menu, then “About Metabase” to see version.
I’m not sure if you can use a non-localhost IP without using a domain, since it will be blocked by CSP:
Are you using a reverse proxy and a domain? Then you need to define that in Settings > Admin > Settings > General.