BUG-000169722 for ArcGIS GIS Server

漏洞 ID 编号	BUG-000169722
已提交	August 5, 2024
上次修改时间	September 11, 2025
适用范围	ArcGIS GIS Server
找到的版本	11.1
操作系统	Windows OS
操作系统版本	10.0 64 Bit
状态	As Designed

附加信息

This is by design. This issue occurs because the Map Viewer app only utilizes CORS requests to access the services. When the service is secured with web-tier authentication (IWA, Basic, client certificate, etc), the CORS request must be sent with credentials. ArcGIS Online only make the CORS requests with credentials for URLs hosted on servers that are included in the 'Trusted servers' list in an organization's security settings. Since viewing the service in ArcGIS Online goes to www.arcgis.com/apps/mapviewer by default, there are no trusted servers so the CORS request will never be sent with credentials. These services are viewable in Map Viewer Classic because they are not accessed with CORS requests.

解决办法

The ArcGIS Online map viewer URL that appears at the top of the REST services directory pages can be adjusted to point to a specific ArcGIS Online organization that has been configured with the ArcGIS Server hostname included in the list of 'Trusted servers'. This allow the services to be viewable in Map Viewer. If an ArcGIS Online organization is not available, the URL can also be adjusted to point to a Portal for ArcGIS where the 'Trusted servers' can be configured. The other option would be to use Map Viewer Classic to view the services.