What are the risks associated with JavaScript hyperlinks on SSRS ?

Hi everyone,

On January 6, 2025, Microsoft set the default configuration in SSRS so that the SupportedHyperlinkSchemes property no longer supports JavaScript.

My questions are:

1. Specifically, what are the risks associated with JavaScript hyperlinks on SSRS ?
2. Does this change affect only hyperlinks? Will other uses of JavaScript in SSRS be impacted as well ?

Thanks in advance,

Ian