Plugin Frontend Sandbox

The Plugin Frontend Sandbox is a security feature that isolates plugin frontend code from the main Grafana application. When enabled, plugins run in a separate JavaScript context, which provides several security benefits:

Prevents plugins from modifying parts of the Grafana interface outside their designated areas
Stops plugins from interfering with other plugins’ functionality
Protects core Grafana features from being altered by plugins
Prevents plugins from modifying global browser objects and behaviors

Plugins running inside the Frontend Sandbox should continue to work normally without any noticeable changes in their intended functionality.

We are currently rolling this functionality, which is disabled by default, to our cloud and on-prem customers. Please read the documentation on how to enable and use the sandbox on your instance.

Documentation