Unable to export a CSV file from a web app embedded in an ArcGIS Experience Builder web experience in ArcGIS Enterprise 10.9.1.
上次发布: May 23, 2022Portal for ArcGIS
漏洞 ID 编号
BUG-000149298
已提交
May 17, 2022
上次修改时间
August 5, 2025
适用范围
Portal for ArcGIS
找到的版本
10.9.1
操作系统
Windows OS
操作系统版本
N/A
修正版本
11.1
状态
Fixed
此漏洞已得到修复。 有关详细信息,请参阅“版本修复”和“其他信息”(如果适用)。
附加信息
For safety reasons, the embedded app in the ArcGIS Experience Builder Embed widget is constrained by the same-origin policy. For domains other than *.arcgis.com or *.esri.com, the sandbox attribute is automatically added, as stated in the following Embed widget documentation: https://doc.arcgis.com/en/experience-builder/configure-widgets/embed-widget.htm#ESRI_SECTION1_280578CCC46D4D41BD9C3C2FB0A02022.
To download embedded content, the 'allow-downloads' property for the iframe must be supported, while the sandbox bans it. The CSV file cannot be downloaded because the domain in Portal for ArcGIS 10.9.1 is not a trusted domain. The CSV file can be downloaded if the portal has a trusted domain (for example, *.esri.com).