漏洞

When the Google Chrome cookie settings, 'cookies without SameSite must be secure' and 'SameSite by default cookies' are set to enabled (the upcoming default settings, postponed due to COVID-19), private apps which require an ArcGIS Online login embedded in public sites with a non-ArcGIS website domain prompt for authentication each time the public site is visited or reloaded in the same browser.