This is documentation for the next version of Grafana documentation. For the latest stable release, go to the latest version.

Documentation Grafana documentation Administration Plugin management Improve security with the Plugins Frontend Sandbox

Improve security with the Plugins Frontend Sandbox

The Plugin Frontend Sandbox helps keep a plugin’s frontend code focused on the plugin’s own area of the Grafana interface.

Plugins running inside the Frontend Sandbox should continue to work normally without any noticeable changes in their intended functionality.

Intended use

The Frontend Sandbox affects how a plugin interacts with the Grafana interface by adding extra controls to reduce the browser capabilities available to plugin code running within Grafana.

Compatibility and requirements

The following applies:

• The Frontend Sandbox is available in public preview in Grafana >=11.5. It’s compatible with all types of plugins including app plugins, panel plugins, and data source plugins.
• Angular-based plugins are not supported.
• Plugins developed and signed by Grafana Labs are excluded and cannot be sandboxed.

Enable the Frontend Sandbox

For self-hosted Grafana installations, add the plugin IDs you want to sandbox in the security section using the enable_frontend_sandbox_for_plugins configuration option.

For Grafana Cloud users, you can simply use the toggle switch in the plugin catalog page to enable or disable the sandbox for each plugin. By default, the sandbox is disabled for all plugins.

Troubleshooting

If a plugin isn’t functioning correctly with the Frontend Sandbox enabled:

1. Temporarily disable the sandbox for that specific plugin
2. Test if the plugin works correctly without the sandbox
3. If the plugin only works with the sandbox disabled, confirm the plugin comes from a source you trust before continuing to use it
4. Report any sandbox-related issues to the plugin developer