Disallow displaying API content within Piwik app

+ regression test
+ regression test for  #7638

1 files changed, 7 insertions, 0 deletions

diff --git a/plugins/CoreHome/javascripts/broadcast.js b/plugins/CoreHome/javascripts/broadcast.js
index 5ada120a6b..51b2a8a64d 100644
--- a/plugins/CoreHome/javascripts/broadcast.js
+++ b/plugins/CoreHome/javascripts/broadcast.js
@@ -416,6 +416,13 @@ var broadcast = {
             );
         }
 
+        if(broadcast.getParamValue('module', urlAjax) == 'API') {
+            broadcast.lastUrlRequested = null;
+            $('#content').html("Loading content from the API and displaying it within Piwik is not allowed.");
+            piwikHelper.hideAjaxLoading();
+            return false;
+        }
+
         piwikHelper.hideAjaxError('loadingError');
         piwikHelper.showAjaxLoading();
         $('#content').empty();