Embedded Energy dashboard is not loaded anymore since I updated to beta 17502

Please use template to report bugs and problems. Post here your questions when not sure where else to post
Only for bugs in the Domoticz application! other problems go in different subforums!

Moderators: leecollings, remb0

Forum rules
Before posting here, make sure you are on the latest Beta or Stable version.
If you have problems related to the web gui, clear your browser cache + appcache first.

Use the following template when posting here:

Version: xxxx
Platform: xxxx
Plugin/Hardware: xxxx
Description:
.....

If you are having problems with scripts/blockly, always post the script (in a spoiler or code tag) or screenshots of your blockly

If you are replying, please do not quote images/code from the first post

Please mark your topic as Solved when the problem is solved.
Post Reply
hansvanlin
Posts: 11
Joined: Wednesday 19 June 2024 10:56
Target OS: Raspberry Pi / ODroid
Domoticz version:
Contact:

Embedded Energy dashboard is not loaded anymore since I updated to beta 17502

Post by hansvanlin »

For a long time I used the Energy dashboard embedded on a node-red UI this was not a problem. (viewtopic.php?t=44289 )
before upgrade:
image_2026-03-25_061135190.png
image_2026-03-25_061135190.png (93.27 KiB) Viewed 1445 times


after upgrade to 17502:
image_2026-03-25_061527693.png
image_2026-03-25_061527693.png (70.31 KiB) Viewed 1445 times

It looks that the stricter Content-Security-Policy (CSP) send with the energy dashboard or X-Frame-Options is preventing loading the dashboard in an embedded way. It is possible to load the energy dashboard in a separate window but that doesn't look so nice.
Does anybody now a workaround for loading the energy dashboard embedded?
hansvanlin
Posts: 11
Joined: Wednesday 19 June 2024 10:56
Target OS: Raspberry Pi / ODroid
Domoticz version:
Contact:

Re: Embedded Energy dashboard is not loaded anymore since I updated to beta 17502

Post by hansvanlin »

I found that something is changed in the latest beta https://github.com/domoticz/domoticz/pull/6676

possible cause new security headers:
iamserver/IamService.cpp: pass TLS flag to add_security_headers() to align with the libwebem update (security headers now sent over plain HTTP; HSTS only over TLS per RFC 6797)

or DOMPurifyis is not configured anymore for iframe:
Used AI to find out what DOMPurifyis doing and it looks it can be configured to safely load iframe:
image_2026-03-25_064910193.png
image_2026-03-25_064910193.png (183.54 KiB) Viewed 1438 times
User avatar
gizmocuz
Posts: 3026
Joined: Thursday 11 July 2013 18:59
Target OS: Raspberry Pi / ODroid
Domoticz version: beta
Location: Top of the world
Contact:

Re: Embedded Energy dashboard is not loaded anymore since I updated to beta 17502

Post by gizmocuz »

Should be solved now in beta 17508

Question, why are you using Node-Red dashboard and not make yourself a good looking template that you can place in Domoticz www/templates folder?
(Possibly send some MQTT values with MQTT-AD to Domoticz)

I think Node-Red is great, but I have this one running in the background and almost never touch it. All values that I need are going to Domoticz
Quality outlives Quantity!
hansvanlin
Posts: 11
Joined: Wednesday 19 June 2024 10:56
Target OS: Raspberry Pi / ODroid
Domoticz version:
Contact:

Re: Embedded Energy dashboard is not loaded anymore since I updated to beta 17502

Post by hansvanlin »

I use Node-red dashboard because it is fast and easy to make and I can connect every platform/brands without editing templates. For al lot of things you want to display in a dashboard there are nodes available. Just drag and configure and it is ready to display on the dashboard.


Unfortunately upgrading to latest version didn't solve this issue.
But I see a lot of new features ...thanks!
hansvanlin
Posts: 11
Joined: Wednesday 19 June 2024 10:56
Target OS: Raspberry Pi / ODroid
Domoticz version:
Contact:

Re: Embedded Energy dashboard is not loaded anymore since I updated to beta 17502

Post by hansvanlin »

Found a fix:
installed an extension in fire-fox which disables the CSP protection.

To solve this properly Domoticz Energy Dashboard should be allowed to display in an iframe especially if iframe is running on the same device (rpi).
eg:
image_2026-03-26_063915034.png
image_2026-03-26_063915034.png (96.72 KiB) Viewed 1355 times
Post Reply