Skip to Main Content
Spotfire Ideas Portal
Status Future Consideration
Product Spotfire
Categories Text Area
Created by Guest
Created on Oct 31, 2019

Add ability to set HTML Sanitation on/off for Desktop

I know you can change this setting in Spotfire Analyst but I don't believe you can change the HTML sanitation on/off in Spotfire Desktop.  I'd like this functionality added.

  • Attach files
  • Guest
    Reply
    |
    Aug 15, 2021

    @Ulf Hocke, you suggestion didn't work for me.


    Tried using false and False but no luck.

  • Guest
    Reply
    |
    Jan 28, 2020

    It is actually possible to do this, but turning off HTML sanitation is not recommended for security reasons.

    The way to change the setting is to do the following:

    1.  Navigate to the "Modules" folder for the installed version of Spotfire Desktop.

    2. Open the folder starting with "Spotfire DXP Forms_"

    3. Edit the file "Spotfire.Dxp.Main.dll.config" with a text editor.

    4. At the end of the file there is an xml-section called "Spotfire.Dxp.Application.Properties.Settings". 

    5. Copy the existing setting:

      <setting name="Desktop_Preference_UseWhitelistForSecuritySensitiveUris" serializeAs="String">
    <value>true</value>
    </setting>

    Make sure to paste the setting to the same xml-section and call the copied setting "Desktop_Preference_PerformHtmlSanitation".

    6. Change the value to "true" for keeping the default value or to "false" to disable HTML sanitation.

    7. Save the file and restart Spotfire Desktop.