Embedded links pointing to web-hosted document items within an ArcGIS Enterprise site return an error stating a refusal to connect.
Portal for ArcGIS
漏洞 ID 编号
BUG-000172755
已提交
December 2, 2024
上次修改时间
April 9, 2025
适用范围
Portal for ArcGIS
找到的版本
11.4
操作系统
Windows Server
操作系统版本
2019 64 Bit
状态
As Designed
经开发团队审核,已确定此行为符合设计。 有关详细信息,请参阅“其他信息”部分。
附加信息
Unfortunately, this is not possible due to SharePoint’s security settings. Specifically, SharePoint sets the X-FRAME-OPTIONS HTTP header to SAMEORIGIN, which prevents its pages from being embedded in external sites.
Additionally, the error message encountered indicates that SharePoint's Content Security Policy (CSP) restricts which domains can frame its content, and ArcGIS Hub and Enterprise Sites are not included in that list.
Refer to https://learn.microsoft.com/en-us/sharepoint/troubleshoot/sites/cannot-display-sharepoint-pages-in-iframe for more details on this restriction,