漏洞
Custom data feeds provider fails to return count when returnCountOnly is set to True.
| 漏洞 ID 编号 | BUG-000178907 |
|---|---|
| 已提交 | August 21, 2025 |
| 上次修改时间 | September 11, 2025 |
| 适用范围 | Portal for ArcGIS |
| 找到的版本 | 11.5 |
| 操作系统 | Windows Server |
| 操作系统版本 | 2025 |
| 状态 | Non-Reproducible |
附加信息
BUG-000178907 - returnCountOnly Thanks for taking the time to submit an issue and for the interest in custom data feeds. This issue that is being brought up here does not expose a bug in custom data feeds (CDF). One of the initial queries sent by ArcGIS clients to feature services usually contains the returnCountOnly parameter. This is required so that proper pagination occurs. CDF providers generally follow one of two data loading patterns: full-fetch or pass-through. In a full-fetch pattern provider, all the data is returned at once (no pagination), so there is no need to independently handle returnCountOnly. The CDF framework counts the number of features returned in the GeoJSON from the getData() method and generates the count for the response. In a pass-through pattern provider, the developer needs to handle this. The client needs to make multiple requests until all the data are loaded. The developer must intercept the request that contains the returnCountOnly parameter and return an appropriate value so that proper pagination can occur. In the sample provider given, the count is being returned along with GeoJSON metadata, which is incorrect, and the CDF framework is interpreting it as improperly formatted GeoJSON. The proper way is to return count JSON immediately, not with metadata at the end of the getData() method. The way to do this is shown in the CDF documentation here: https://developers.arcgis.com/enterprise-sdk/guide/custom-data-feeds/pass-through-custom-data-providers/ Also, see the ArcGIS REST specification on returnCountOnly and returnExtentOnly here: https://developers.arcgis.com/rest/services-reference/enterprise/query-feature-service-layer/ Adding 'return output;' on line 37 in the 'if statement' in the provided code would fix the problem. Hope this helps.重现步骤
漏洞 ID: BUG-000178907
软件:
- Portal for ArcGIS
当漏洞状态发生变化时获得通知
发现关于本主题的更多内容
搜索相关信息
查找与此主题相关的培训
探索想法并提供反馈
获取来自 ArcGIS 专家的帮助
下载 Esri 支持应用程序