BUG-000147912 for ArcGIS Online

漏洞 ID 编号	BUG-000147912
已提交	March 24, 2022
上次修改时间	August 20, 2025
适用范围	ArcGIS Online
找到的版本	10.1
操作系统	Windows OS
操作系统版本	10.0 64 Bit
状态	Will Not Be Addressed

附加信息

In this case, the embedded content is the Map Viewer. Since the ArcGIS Experience Builder app is being accessed anonymously with no token available, the subscriber content is unable to be accessed as expected. Otherwise, behavior against the purpose of subscriber content definition is expected. The reason why the out-of-the-box map widget within ArcGIS Experience Builder works is that the ArcGIS Experience Builder app allows for confirmation before consuming the application owner's credits whenever a public user uses it. This case is different because it is an iframe related to an external URL (other than ArcGIS Experience Builder itself), which is what the document has clarified. Besides, the official document states about the Esri ArcGIS Experience Builder app, not for a web map (Map Viewer website) inside an iframe.

解决办法

Use the URL option to add a new item in ArcGIS Online.
Store credentials when adding the item.
Add the layers with credentials embedded to the underlying web map so the desired app can be used when shared publicly.