book
Article ID: KB0070596
calendar_today
Updated On:
Description
The mod visualization is rendered as a blank DOM element on the Web Player in Chrome latest upgrades. This behaviour shall also be seen in other browsers going forward even though at present it might be rendering as expected ( As the browsers slowly introduce this change).
The following message displayed on the mod element "Third-party cookies must be enabled in your browser to use this visualization".
This is because starting from Chrome version 80 the cookies will be withheld on cross-site requests (such as calls to load images or frames) by default. Mods visualizations are rendered in a sandboxed iframe which will no longer send cookies in HTTP requests to load the resources because the cookies will be treated as SameSite=Lax
by default which means that any resource referenced from inside the mod will fail to load breaking the visualization as the cookies will be withheld on cross-site requests.
There can be references made to the third party Libraries/resources in the mod code and thus brings in the scenario of cross site cookie blocking.
Issue/Introduction
Some of the Mods Visualizations are rendered as expected in the Analyst but not on the Web Player in most of the recent browser upgrades.
Resolution
For Spotfire versions 11.0 - 11.3, it is a system requirement (see
https://docs.tibco.com/pub/spotfire/general/sr/sr/topics/tibco_spotfire_web_player.html) to have a Spotfire Server configured on HTTP[S] so that the SameSite cookie attribute can be set to None and Secure in order to send the required cookies and load the MOD visualizations successfully. From version 11.4, this requirement has been removed (see
https://community.spotfire.com/articles/spotfire/whats-new-tibco-spotfirer-114-lts/).
SameSite Cookie Attribute
https://docs.tibco.com/pub/spotfire_server/latest/doc/html/TIB_sfire_server_tsas_admin_help/server/topics/samesite_cookie_attribute.html Note that this requirement is due to the security implementations in the recent Chrome upgrades and many other browsers are soon to follow the same.