| Bug ID Number |
BUG-000171201 |
| Submitted | October 3, 2024 |
| Last Modified | August 6, 2025 |
| Applies to | ArcGIS Instant Apps |
| Version found | N/A |
| Operating System | N/A |
| Operating System Version | N/A |
| Status | Known Limit
After review by the development team, it has been determined that this issue is related to a known limitation with the software that lies outside of Esri's control. The issue's Additional Information section may contain further explanation.
|
Additional Information
When an application is embedded via iframe, certain browser security policies can restrict access to the clipboard API, which is what's being used within the Instant Apps sharing tool.
This issue can be due to cross-origin restrictions (origin of parent is different than origin of embedded Instant App), permissions not granted to the iframe via allow attribute(allow='clipboard-write'), or a combination of both. From the perspective of Instant Apps in a cross-origin scenario, this is a known limitation since a parent iframe is inaccessible from the embedded Instant App.
Workaround
Set permissions via iframe html attributes from the parent app. More info can be found here: https://developer.mozilla.org/en-US/docs/Web/API/Clipboard_API#security_considerations
Steps to Reproduce