Product:TIBCO Spotfire Analyst
Versions:11.7 and higher
Summary:
Starting from TIBCO Spotfire installed client (Analyst and Desktop) version 11.7, all third party cookies must be sent over HTTPS, and have the additional cookie attribute "Secure;SameSite=None". This will also become a requirement for the latest LTS versions, 10.10 and 11.4, in a future Service Pack.
Details:
Starting from TIBCO Spotfire installed client (Analyst and Desktop) version 11.7, all third party cookies must be sent over HTTPS, and have the additional cookie attribute "Secure;SameSite=None". This will also become a requirement for the latest LTS versions, 10.10 and 11.4, in a future Service Pack.
This has already been a requirement for the web clients (TIBCO Spotfire Consumer and Business Author) since late 2019, so any functionality that has been successfully used in a web client since then should continue to work in the installed clients.
Any custom UI with the ability to add iframes, such as Web Page panels or Text Areas where html sanitation is turned off, may require third party cookies. If this iframe content is served using plain HTTP, these cookies will no longer work. The effect can be anything from being unable to login to loss of saved state. If you are using an iframe in this manner, ensure you make the required changes to use HTTPS and add the additional cookie attribute "Secure;SameSite=None" to avoid being impacted by this new requirement.
Note: Custom visuals, including the Spotfire JavaScript Visualization Framework (JSViz) or Spotfire Mods, are not affected by the change since they do not require third party cookies.
Resolution:
Versions:11.7 and higher
Summary:
Starting from TIBCO Spotfire installed client (Analyst and Desktop) version 11.7, all third party cookies must be sent over HTTPS, and have the additional cookie attribute "Secure;SameSite=None". This will also become a requirement for the latest LTS versions, 10.10 and 11.4, in a future Service Pack.
Details:
Starting from TIBCO Spotfire installed client (Analyst and Desktop) version 11.7, all third party cookies must be sent over HTTPS, and have the additional cookie attribute "Secure;SameSite=None". This will also become a requirement for the latest LTS versions, 10.10 and 11.4, in a future Service Pack.
This has already been a requirement for the web clients (TIBCO Spotfire Consumer and Business Author) since late 2019, so any functionality that has been successfully used in a web client since then should continue to work in the installed clients.
Any custom UI with the ability to add iframes, such as Web Page panels or Text Areas where html sanitation is turned off, may require third party cookies. If this iframe content is served using plain HTTP, these cookies will no longer work. The effect can be anything from being unable to login to loss of saved state. If you are using an iframe in this manner, ensure you make the required changes to use HTTPS and add the additional cookie attribute "Secure;SameSite=None" to avoid being impacted by this new requirement.
Note: Custom visuals, including the Spotfire JavaScript Visualization Framework (JSViz) or Spotfire Mods, are not affected by the change since they do not require third party cookies.
Resolution: