BUG-000171201 for ArcGIS Instant Apps

漏洞 ID 编号	BUG-000171201
已提交	October 3, 2024
上次修改时间	August 6, 2025
适用范围	ArcGIS Instant Apps
找到的版本	N/A
操作系统	N/A
操作系统版本	N/A
状态	Known Limit

附加信息

When an application is embedded via iframe, certain browser security policies can restrict access to the clipboard API, which is what's being used within the Instant Apps sharing tool. This issue can be due to cross-origin restrictions (origin of parent is different than origin of embedded Instant App), permissions not granted to the iframe via allow attribute(allow='clipboard-write'), or a combination of both. From the perspective of Instant Apps in a cross-origin scenario, this is a known limitation since a parent iframe is inaccessible from the embedded Instant App.

解决办法

Set permissions via iframe html attributes from the parent app. More info can be found here: https://developer.mozilla.org/en-US/docs/Web/API/Clipboard_API#security_considerations