diff --git a/addons/web/static/src/legacy/js/report/client_action.js b/addons/web/static/src/legacy/js/report/client_action.js
index d4cb3096aea..116b96e9181 100644
--- a/addons/web/static/src/legacy/js/report/client_action.js
+++ b/addons/web/static/src/legacy/js/report/client_action.js
@@ -43,7 +43,7 @@ var ReportAction = AbstractAction.extend({
             $buttons: this.$buttons,
         };
         return Promise.all([this._super.apply(this, arguments), session.is_bound]).then(async function () {
-            var web_base_url = session['web.base.url'];
+            var web_base_url = window.origin;
             var trusted_host = utils.get_host_from_url(web_base_url);
             var trusted_protocol = utils.get_protocol_from_url(web_base_url);
             self.trusted_origin = utils.build_origin(trusted_protocol, trusted_host);
diff --git a/addons/web/static/src/legacy/js/report/report.js b/addons/web/static/src/legacy/js/report/report.js
index daf50c0ef46..ae580c8d488 100644
--- a/addons/web/static/src/legacy/js/report/report.js
+++ b/addons/web/static/src/legacy/js/report/report.js
@@ -13,7 +13,7 @@ $(document.body)
     .addClass('container-fluid')
     .removeClass('container');
 
-var web_base_url = $('html').attr('web-base-url');
+var web_base_url = window.origin;
 var trusted_host = utils.get_host_from_url(web_base_url);
 var trusted_protocol = utils.get_protocol_from_url(web_base_url);
 var trusted_origin = utils.build_origin(trusted_protocol, trusted_host);