Product:TIBCO Spotfire Analyst
Versions:7.11 HF-007 and higher
Summary:
'Image from URL' and 'Web Page Panel' features in the Spotfire Analyst are not working after applying a hotfix.
Details:
After applying the hotfix HF-007 or later for 7.11, you will see a change in the UI window for the 'Image from URL' and 'Web Page Panel' features. By default, the setting i.e. Use "Whitelist for Allowed URIs" is set to be 'True' (blank).
If you want to revert back to the old behavior i.e. you don't want to add the whitelist URIs then follow the below section.
Resolution:
For Spotfire Analyst/Client:
1) Open Spotfire Analyst(with administrator rights) >> Tools Menu >> Administration Manager >> Preferences.
2) Select the desired group >> Application >> Application Preferences.
3) Set "Use Whitelist for Allowed URIs" = False
For Spotfire Desktop: Follow the below steps for TIBCO Spotfire Desktop:
1) Make a comma-separated list of all URLs you want to be able to use with 'Image from URL' or 'Web Page Panel'.
2) Close Spotfire Desktop.
3) Go to AppData on your computer and, in the Modules folder, open the Spotfire DXP Forms folder. For example: C:\Users\{user name}\AppData\Local\TIBCO\Spotfire Desktop\{version number}\Modules\Spotfire DXP Forms_34.0.12508.5863
Note that the Modules folder is hidden by default.
4) Open Spotfire.Dxp.Main.dll.config in a text editor (e.g., Notepad).
5) Near the bottom of the file, locate the setting - Desktop_Preference_WhitelistForSecuritySensitiveUris.
6) As a value, insert the comma-separated list of URIs created in step 1. If desired, you can add a wildcard (*) to the first part of the host-name for the URI, to include all URIs within a certain domain.
The final result could look something like this:
[....]
<!--
A whitelist of comma-separated uris that are allowed to be used in certain situations.
This setting is only used if Desktop_Preference_UseWhitelistForSecuritySensitiveUris is set to true.
-->
<setting name="Desktop_Preference_WhitelistForSecuritySensitiveUris" serializeAs="String">
<value>http://example.com/some/very/special/deep/path/,http://*.example2.com/,http://*.example3.com/some/path/</value>
</setting>
</Spotfire.Dxp.Application.Properties.Settings>
</applicationSettings>
<startup><supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.5"/></startup>
</configuration>
7) Save the file.
8) Start Spotfire Desktop.
For Spotfire Cloud User(s): Get in touch with TIBCO Spotfire Support for further assistance.
Note: The above behavior has been introduced to improve the security.
'Image from URL' and 'Web Page Panel' features are not working after applying a hotfix in Spotfire Analyst
