Tokens generated with Portal for ArcGIS and the referrer URL are valid for requests where the referrer is omitted in the Header request.
上次发布: February 23, 2023Portal for ArcGIS
漏洞 ID 编号
BUG-000154453
已提交
December 14, 2022
上次修改时间
October 4, 2024
适用范围
Portal for ArcGIS
找到的版本
10.9.1
操作系统
Windows OS
操作系统版本
10.0 64 Bit
状态
As Designed
经开发团队审核,已确定此行为符合设计。 有关详细信息,请参阅“其他信息”部分。
附加信息
This is the expected behavior of the software. There are situations where applications need to open pages where the browser does not send a referrer, and in those situations, users expect tokens to work.