rusackas commented on code in PR #43906:
URL: https://github.com/apache/superset/pull/43906#discussion_r3943077799


##########
docs/docs/using-superset/embedding.mdx:
##########
@@ -139,6 +139,25 @@ The following URL parameters can be passed through the 
`urlParams` option in `da
 
 ---
 
+## Embedding a Single Chart
+
+Individual charts can also be embedded standalone, outside of a dashboard, 
using a chart permalink. From Explore, generate a permalink for the chart, then 
append URL parameters to it:
+
+```
+/explore/p/<permalink-key>/?standalone=1&show_download=1
+```
+
+| Parameter       | Values   | Effect                                          
                           |
+| --------------- | -------- | 
-------------------------------------------------------------------------- |
+| `standalone`    | `0`, `1` | `0`: normal Explore view; `1`: hide the Explore 
header and controls        |
+| `show_download` | `0`, `1` | Show a compact download control (CSV, JSON, 
Excel) on the standalone chart |
+
+`show_download` is opt-in and has no effect outside of `standalone=1`. The 
download control still respects the viewer's export permissions — it's hidden 
for users who lack them even when the parameter is set. With the 
`GRANULAR_EXPORT_CONTROLS` feature flag enabled, this requires the 
`can_export_data` permission on `Superset`; otherwise it falls back to 
`can_csv` on `Superset`.
+

Review Comment:
   Fair point, the default `SESSION_COOKIE_SAMESITE = "Lax"` does keep the 
cookie out of a cross-site iframe. Added a short caveat with the 
`SameSite=None` + `Secure` + `frame-ancestors` combo for that case.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to