Spotfire® Server and Environment Security

Spotfire Shape Collections

A shape collection is a group of image files that can be used as marker shapes in an analysis. It is created by uploading or reusing previously uploaded image files.

When SVG files are used to create a shape collection, Spotfire renders these SVGs in a sandbox thus isolating any potentially malicious JavaScripts embedded in the SVG. The result is a PNG that is stored in the shape collection.

A shape collection saved as a local file (.dxpshapes file) only contains metadata and PNG images. Unlike visualization mods and action mods, shape collections do not contain scripts and have no concepts of author, trust, or signatures.