embed iFrame - from a private report Only Me

Audrey_Shull

If you go to this URL on JMP Public, you will be asked to sign in, and you won't be able to see this post because it is private.

https://public.jmp.com/packages/Distributions-with-URL/js-p/5bbe32de76c3ca068862419b

 

However, i can embed this private content in an iFrame. This seems like a hole. This is on public.jmp.com

 

Here is an embedded iFrame of a parent folder on vmwwin7a366. Here is the link, which will be private if you navigate there.

https://vmwwin7a366.na.sas.com:3501/packages/Testing-html-tags/js-p/5bd9d3097e0600120cf42eb2

 

 

Here is an embedded iFrame of a child report on vmwwin7a366. This is the link: https://vmwwin7a366.na.sas.com:3501/packages/Graph-Builder/js-p/5bd9d3097e0600120cf42eb4 which will be private if you go there in a browser.