Updating the whitelist for allowed URIs when running Spotfire Analyst without a server

When running Spotfire without a server, the whitelist will be enabled by default, and it will be empty from the start. All URIs in all analyses using Image from URL and Web Page Panel must be added to the whitelist, if you want to use these features.

Before you begin

You must have access to the installed client.

Procedure

Make a comma-separated list of all URLs you want to be able to use with Image from URL or Web Page Panel.
Close Spotfire.
Go to AppData on your computer and, in the Modules folder, open the Spotfire DXP Forms folder. For example: C:\Users\{user name}\AppData\Local\Spotfire\{version number}\Modules\Spotfire DXP Forms_62.0.18509.4618
Note that the Modules folder is hidden by default.
Open Spotfire.Dxp.Main.dll.config in a text editor (for example Notepad).
Near the bottom of the file, locate the setting Desktop_Preference_WhitelistForSecuritySensitiveUris.

As value, insert the comma-separated list of URIs created in step 1. If desired, you can add a wildcard (*) to the first part of the host-name for the URI, to include all URIs within a certain domain. The final result could look something like this:

[....]

     <!-- 

        A whitelist of comma-separated uris that are allowed to be used in certain situations.

        This setting is only used if Desktop_Preference_UseWhitelistForSecuritySensitiveUris is set to true.

        -->

      <setting name="Desktop_Preference_WhitelistForSecuritySensitiveUris" serializeAs="String">

        <value>http://example.com/some/very/special/deep/path/,http://*.example2.com/,http://*.example3.com/some/path/</value>

      </setting>

    </Spotfire.Dxp.Application.Properties.Settings>

  </applicationSettings>

  <startup><supportedRuntime version="v4.0" 

sku=".NETFramework,Version=v4.5"/></startup>

</configuration>

Save the file.
Start Spotfire.