Spotfire Mods visualizations are rendered blank with the following message: "Third-party cookies must be enabled in your browser to use this visualization"

Spotfire Mods visualizations are rendered blank with the following message: "Third-party cookies must be enabled in your browser to use this visualization"

book

Article ID: KB0070596

calendar_today

Updated On:

Products Versions
Spotfire Web Player 11.0 and higher

Description

The mod visualization is rendered as a blank DOM element on the Web Player in Chrome latest upgrades.  This behaviour shall also be seen in other browsers going forward even though at present it might be rendering as expected ( As the browsers slowly introduce this change).

The following message displayed on the mod element "Third-party cookies must be enabled in your browser to use this visualization".

This is because starting from Chrome version 80 the cookies will be withheld on cross-site requests (such as calls to load images or frames) by default. Mods visualizations are rendered in a sandboxed iframe which will no longer send cookies in HTTP requests to load the resources because the cookies will be treated as SameSite=Lax by default which means that any resource referenced from inside the mod will fail to load breaking the visualization as the cookies will be withheld on cross-site requests.


There can be references made to the third party Libraries/resources in the mod code and thus brings in the scenario of cross site cookie blocking. 

Environment

All

Resolution

For Spotfire versions 11.0 - 11.3, it is a system requirement (see https://docs.tibco.com/pub/spotfire/general/sr/sr/topics/tibco_spotfire_web_player.html) to have a Spotfire Server configured on HTTP[S] so that the SameSite cookie attribute can be set to None and Secure in order to send the required cookies and load the MOD visualizations successfully. From version 11.4, this requirement has been removed (see https://community.spotfire.com/articles/spotfire/whats-new-tibco-spotfirer-114-lts/).

SameSite Cookie Attribute
https://docs.tibco.com/pub/spotfire_server/latest/doc/html/TIB_sfire_server_tsas_admin_help/server/topics/samesite_cookie_attribute.html 


Note that this requirement is due to the security implementations in the recent Chrome upgrades and many other browsers are soon to follow the same.

Issue/Introduction

Some of the Mods Visualizations are rendered as expected in the Analyst but not on the Web Player in most of the recent browser upgrades.

Additional Information

Powered by Wolken Software