Dashboards: How to disable /api/search?

[freetime007]

What happened?

Whenever the page is accessed, it automatically loads
HTTP GET "/api/search?limit=5&dashboardUID=xxx&dashboardUID=yyy"
How can I avoid duplicate dashboardUID or disable it?

What did you expect to happen?

avoid or disable it

Did this work before?

No

How do we reproduce it?

1.reload page, and use browser tools

Environment (with versions)?

Grafana: 9.4.3
OS:windows/mac
Browser: Edge,chrome

Grafana platform?

A downloaded binary

[tonypowa]

Hi @freetime007
Thank you for creating this issue

Can you elaborate on why you would disable that api call? How does it impact the functionality or performance?

[freetime007]

Hi @tonypowa
Due to security scans identifying the following risks caused by the API:
/api/search/dashboardUID=xxxx&dashboardUID=yyyy&dashboardUID=zzzz

The report shows:
OWASP A6:2017-Security Misconfiguration
HTTP Protocol Constraints-HTTP Duplicated Parameter Name

I would like to ask how to configure or modify this? Thanks

[tonypowa]

Thanks for your answer
I am not sure if that's possible, so I am routing this issue to the dashboard team for review.