Skip to Main Content
Spotfire Ideas Portal

Add ability to set HTML Sanitation on/off for Desktop

I know you can change this setting in Spotfire Analyst but I don't believe you can change the HTML sanitation on/off in Spotfire Desktop.  I'd like this functionality added.

  • Attach files
      Drop here to upload
    • Guest
      Reply
      |
      Aug 15, 2021

      @Ulf Hocke, you suggestion didn't work for me.


      Tried using false and False but no luck.

    • Guest
      Reply
      |
      Jan 28, 2020

      It is actually possible to do this, but turning off HTML sanitation is not recommended for security reasons.

      The way to change the setting is to do the following:

      1.  Navigate to the "Modules" folder for the installed version of Spotfire Desktop.

      2. Open the folder starting with "Spotfire DXP Forms_"

      3. Edit the file "Spotfire.Dxp.Main.dll.config" with a text editor.

      4. At the end of the file there is an xml-section called "Spotfire.Dxp.Application.Properties.Settings". 

      5. Copy the existing setting:

        <setting name="Desktop_Preference_UseWhitelistForSecuritySensitiveUris" serializeAs="String">
      <value>true</value>
      </setting>

      Make sure to paste the setting to the same xml-section and call the copied setting "Desktop_Preference_PerformHtmlSanitation".

      6. Change the value to "true" for keeping the default value or to "false" to disable HTML sanitation.

      7. Save the file and restart Spotfire Desktop.