Loading

Error "A potentially unsafe URL has been blocked" When Using URL Actions

Publiseringsdato: Apr 14, 2025
Beskrivelse

When you try to use a URL action to view local images on Tableau Server or Tableau Cloud, the following error might occur:
 

A potentially unsafe URL has been blocked
 

Cause

The behavior encountered when attempting to link to a local file from a URL action within a dashboard hosted on Tableau Cloud or Tableau Server is expected. This is due to security implementations within Tableau Cloud or Tableau Server which address potential vulnerabilities when linking to local files, these security enhancements were implemented in Tableau Server 8.1.

Løsning

Option 1 

Add URL protocol schemes to the safe list by using the tsm configuration set command. The schemes httphttpsgophernews, and mailto are whitelisted by default. This command can contain multiple comma and space-separated values enclosed by double quotes, as in this example:

  • tsm configuration set -k vizqlserver.url_scheme_whitelist -v scheme1, scheme2

The values you specify overwrite previous settings (excluding the default settings). Therefore, you must include the full list of schemes in the set command. (You cannot amend the list of schemes by running the set command repeatedly.)

The list should consist of schemes - such as mailto, file, or javascript - rather than individual urls. The following command is not valid:

  • tsm configuration set -k vizqlserver.url_scheme_whitelist -v file:\\pathtomyfilehere

For example, to whitelist the >file protocol:

  1. On the computer running Tableau Server, open the Command Prompt window as an administrator and navigate to the Tableau Server bin directory:
  2. At the command prompt, run the following commands in order:
    • tsm stop
    • tsm configuration set -k vizqlserver.url_scheme_whitelist -v file
    • tsm pending-changes apply
    • tsm start

Important: Only Internet Explorer allows the use of the file protocol. Chrome and Firefox block the file protocol for security reasons and whitelisting this protocol in Tableau Server cannot force Chrome or Firefox to allow the file protocol.
 

Option 2

Host the files on an external webserver that can be accessed via http or https. If the files within the desired folder were hosted on a webpage, the URL Action should work as expected within Tableau Cloud and Tableau Server.

Knowledge-artikkelnummer

001473812

 
Laster
Salesforce Help | Article