You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
One of the actionlinks shown in the ellipsis button after VegaLite generates a figure in the browser is "Edit in Vega editor." Since this reaches out to https://vega.github.io/editor/#/ with the current figure and all data associated with it in the JSON spec passed to the editor, it poses a risk for those working with sensitive data. Apparently this data is kept client side only in the browser. However, it is better that someone working with the figure consider the potential risk and choose this option actively rather than misconstrue that the editor is local, when it is querying an external URL. So make actionlinks(false) the default in the package.
The text was updated successfully, but these errors were encountered:
One of the
actionlinks
shown in the ellipsis button after VegaLite generates a figure in the browser is "Edit in Vega editor." Since this reaches out to https://vega.github.io/editor/#/ with the current figure and all data associated with it in the JSON spec passed to the editor, it poses a risk for those working with sensitive data. Apparently this data is kept client side only in the browser. However, it is better that someone working with the figure consider the potential risk and choose this option actively rather than misconstrue that the editor is local, when it is querying an external URL. So makeactionlinks(false)
the default in the package.The text was updated successfully, but these errors were encountered: