Skip to main content

Accepted Tags 🛡️

Certified Visual Only

This page applies to HTML Content (lite), the certified edition of the visual.

The regular HTML Content edition does not filter your content for tags - it passes values through to the Power BI custom-visual sandbox and relies on the sandbox as its only line of defense. This is the key behavioral difference between the two editions.

Also see Sanitization for how content is filtered within allowed tags.

HTML and SVG tags

<a/><address/><article/><aside/><b/>
<base/><bdi/><bdo/><blockquote/><br/>
<caption/><cite/><code/><col/><colgroup/>
<data/><dd/><del/><details/><dfn/>
<div/><dl/><dt/><em/><figcaption/>
<figure/><footer/><header/><hgroup/><hr/>
<h1/><h2/><h3/><h4/><h5/>
<h6/><i/><img/> *<ins/><kbd/>
<li/><main/><mark/><meter/><nav/>
<ol/><output/><p/><pre/><progress/>
<q/><rb/><rp/><rt/><rtc/>
<ruby/><s/><samp/><search/><section/>
<small/><span/><strong/><sub/><summary/>
<sup/><table/><tbody/><td/><tfoot/>
<th/><thead/><time/><tr/><u/>
<ul/><var/><wbr/>

* <img/> can be used with data URLs.

  • Content cannot be loaded from remote endpoints, in order to comply with visual certification rules.
  • For raster image MIME types (image/png, image/jpeg, image/gif, image/webp, image/bmp) the URL must be base64-encoded (data:image/png;base64,…); plain-text variants are rejected.
  • From version 1.6.1 onwards, data:image/svg+xml is also permitted and accepts ;base64,, ;utf8,, and bare-comma forms; the inner SVG is recursively scanned and <script/>, <foreignObject/>, and <use/> are stripped.

All SVG tags should also be supported, with the exception of <use/>, <script/>, and <foreignObject/>.

  • From version 1.6.1 onwards, SMIL animation tags (<animate/>, <animateMotion/>, <animateTransform/>, <set/>) are also permitted, with restrictions on which attributes they may target - see Sanitization for the safe-target list.

See also

  • Visual Editions - comparison of the regular and lite editions, and guidance on choosing between them.
  • Sanitization - the full set of sanitization rules that apply to content and stylesheets in the lite edition.
  • For the canonical, machine-checked rule set with worked input/output examples, see the visual repo: docs/sanitization-rules.md.