Menu showing in embedded dashboard

[wolframhaussig]

Kibana version: 7.9.1

Elasticsearch version: 7.9.1

Server OS version: Red Hat Enterprise Linux Server release 7.8

Browser version: Google Chrome 85.0.4183.102 (Offizieller Build) (64-Bit)

Browser OS version: Windows 10 1809

Original install method (e.g. download page, yum, from source, etc.): download page

Describe the bug:
We are currently in the process of upgrading from version 7.8.0 to 7.9.1 and I think I found a difference in behaviour between those versions in regard to embedding the metricbeat system host overview dashboard:

In our production environment(7.8.0), I create the link using "Share->Embed code->Saved Object" which generated the following url:

https://myhost:5601/s/production-data-team/app/kibana#/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8-ecs?embed=true&_g=(filters%3A!()%2CrefreshInterval%3A(pause%3A!t%2Cvalue%3A0)%2Ctime%3A(from%3Anow-15m%2Cto%3Anow))

With this, it is perfectly possible to open the dashboard and switch back and forth between system and host overview.

In our test environment(7.9.1), I created the link using "Share->Embed code->Saved Object"(without any options checked) which in turn generated the following url:

https://myhost:5601/s/production-data-team/app/dashboards#/view/79ffd6e0-faa0-11e6-947f-177f697178b8-ecs?embed=true&_g=(filters%3A!()%2CrefreshInterval%3A(pause%3A!t%2Cvalue%3A0)%2Ctime%3A(from%3Anow-15m%2Cto%3Anow))&hide-filter-bar=true

Initially, this looks good as the dashboard is shown correctly and without the menu on the left. Also, switching to the system overview is working. But when switching back from the system overview to a specific host the menu on the left starts showing because the url is changed to:
https://myhost:5601/s/production-data-team/app/kibana#/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8-ecs?_a=(query:(language:kuery,query:'host.name:%22myhost%22'))

Steps to reproduce:

1. get dashboard url for embedding the metricbeat system host overview
2. change to system overview
3. change back to host overview

Expected behavior:
Menu should not be shown

Screenshots (if relevant):

Errors in browser console (if relevant):

Navigated to https://myhost:5601/s/production-data-team/app/kibana
kibana#/dashboard/79ffd6e0-faa0-11e6-947f-177f697178b8-ecs?_a=(query:(language:kuery,query:'host.name:%22myhost%22')):342 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-P5polb1UreUSOe5V/Pv7tc+yeZuJXiOi/3fqhGsU7BE='), or a nonce ('nonce-...') is required to enable inline execution.

bootstrap.js:43 ^ A single error about an inline script not firing due to content security policy is expected!

[elasticmachine]

Pinging @elastic/kibana-app (Team:KibanaApp)

[flash1293]

This is happening because TSVB is linking with an anchor element to the "Item url" (drilldown_url in code) configurable in top n and table visualizations instead of calling navigateToApp. The fix is easy, I will put together a PR.

[flash1293]

Closed by #78005