laptop and a wrench

漏洞

Web Map Service (WMS) GetMap requests are sent as POST with an invalid encoded body when the GetMap requests' URL exceeds the configured maxUrlLength of @arcgis/core/config.

上次发布: May 8, 2022 ArcGIS API for JavaScript
漏洞 ID 编号 BUG-000147618
已提交March 15, 2022
上次修改时间June 5, 2024
适用范围ArcGIS API for JavaScript
找到的版本4.22
操作系统Windows OS
操作系统版本10.0 64 Bit
状态Will Not Be Addressed

附加信息

The Web Map Service (WMS) spec never standardized XML encoding for the post body, so GetMap requests as XML is not supported when sent as POST since the XML may be different for each server. Regarding always sending GetMap requests as GET, we decided against that as well, since we do not want to break existing layers where the server responds correctly. As an alternative, this request interceptor always makes a GET request: esriConfig.request.interceptors.push({ urls: "https://host/path", async before(params) { if (params.requestOptions.responseType === "image") { const url = new URL(params.url); url.search = new URLSearchParams([ ...Array.from(url.searchParams.entries()), ...Object.entries(params.requestOptions.query || {}) ]).toString(); const img = new Image() img.crossOrigin = "anonymous"; img.src = url.href; await img.decode() return img; } } });

重现步骤

漏洞 ID: BUG-000147618

软件:

  • ArcGIS API for JavaScript

当漏洞状态发生变化时获得通知

下载 Esri 支持应用程序

发现关于本主题的更多内容

获取来自 ArcGIS 专家的帮助

联系技术支持部门

下载 Esri 支持应用程序

转至下载选项