Spotfire: Blank web page and "Illegal Mashup Domain" error seen in browser when opening Spotfire Javascript API mashup

 Error: ErrorOpen Description: Illegal mashup domain

Example:

This issue will be seen if you have configured specific domains in the configuration to restrict the Spotfire Server access using JavaScript API and then try to open the mashup from an unspecified domain. In general, you enable the JavaScript API in the Spotfire.Dxp.Worker.Web.config file in the following line:

 <javaScriptApi enabled="true" domain="" />

If you specify any domain names in the "domain" property above then the Spotfire Server can ONLY be accessed from those domains. If you try to access the Spotfire Server from a mashup from any other domain(s), you will get the "Illegal mashup domain" error.

To resolve, add the domain of the mashup file location to the "domain" property or remove all domains to remove the restriction in general. See the reference  Manually editing the service configuration files for more details.