laptop and a wrench

漏洞

The JavaScript Identity Manager requests are incorrectly formatted, causing errors when going through the proxy.

上次发布: May 8, 2019 ArcGIS Web AppBuilder developer edition
漏洞 ID 编号 BUG-000088254
已提交June 10, 2015
上次修改时间June 5, 2024
适用范围ArcGIS Web AppBuilder developer edition
找到的版本1.0
状态Non-Reproducible

附加信息

This issue cannot be reproduced.

解决办法

A temporary fix can be accomplished by changing the '?' to a '&' in the proxy.ashx file by adding the following code:

 

if ((uri.Split('?').Length - 1) > 1)

{

StringBuilder sb = new StringBuilder(uri);

sb[uri.LastIndexOf("?")] = '&';

uri = sb.ToString();

}

 

After this line:

 

if (uri.StartsWith("http%3a%2f%2f", StringComparison.InvariantCultureIgnoreCase) || uri.StartsWith("https%3a%2f%2f", StringComparison.InvariantCultureIgnoreCase))

 

The following namespace also needs to be added:

 

using System.Text;

 

Now, the application runs as expected.

 

Please also see the attached proxy.ashx file for reference.

重现步骤

漏洞 ID: BUG-000088254

软件:

  • ArcGIS Web AppBuilder developer edition

当漏洞状态发生变化时获得通知

下载 Esri 支持应用程序

发现关于本主题的更多内容

获取来自 ArcGIS 专家的帮助

联系技术支持部门

下载 Esri 支持应用程序

转至下载选项