HTML Text Widget

By default, the Tomcat server is configured to reject any image not hosted on the application server. As a result, the link, html and image widgets do not allow referencing external images.

A simple change to the default tomcat configuration (in the $MM_HOME/tomcat/conf/web.xml) can fix that. Change:

<filter>

<filter-name>SecurityHeadersFilter</filter-name>

<filter-class>MITI.tomcat.filter.SecurityHeaders</filter-class>

<init-param>

 <param-name>Content-Security-Policy</param-name>

 <param-value>default-src 'self'; child-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline';</param-value>

</init-param>

<init-param>

 <param-name>X-Content-Type-Options</param-name>

 <param-value>nosniff</param-value>

</init-param>

<init-param>

 <param-name>X-XSS-Protection</param-name>

 <param-value>1; mode=block</param-value>

</init-param>

</filter>

To:

<filter>

<filter-name>SecurityHeadersFilter</filter-name>

<filter-class>MITI.tomcat.filter.SecurityHeaders</filter-class>

<init-param>

 <param-name>Content-Security-Policy</param-name>

 <param-value>default-src 'self'; child-src 'self'; img-src * 'self' data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline';</param-value>

</init-param>

<init-param>

 <param-name>X-Content-Type-Options</param-name>

 <param-value>nosniff</param-value>

</init-param>

<init-param>

 <param-name>X-XSS-Protection</param-name>

 <param-value>1; mode=block</param-value>

</init-param>

</filter>

The HTML text is now embedded in your dashboard.

<div> is not allowed in the HTML widget as with any dashboard technologies (like any BI), custom HTML cannot use <div> as it would break the overall layout. You may use multiple widgets in the dashboard and lay them out how you want.