Public Notification Instant App export does not work when embedded in ExB

Question

I would like to embed a Public Notification Instant App in an Experience Builder page to keep users on the same web app. Unfortunately the pdf/csv Export option does not work when set up this way.

I've tested this issue to occur on ArcGIS Enterprise version 11.5.

This issue does not happen on the AGOL version and wondering if this was a bug that has been fixed, if so what version of Enterprise should we expect the fix?

cblanchard · Answer

Hi @mwartman_grey.,

Thank you for clarifying about your issue!

There is an existing bug about this behaviour in ArcGIS Dashboards that has been closed and marked as a Known Limit with the following explanation: "In ArcGIS Dashboards, embedded content is placed in a sandboxed iFrame. Sandboxing is done for security reasons, and allowing downloads from embedded content (e.g., via the allow-downloads sandbox flag) is a security vulnerability. At this time, Esri is not open to allowing all downloads from embedded apps or pages."

The link to the bug is here: https://support.esri.com/en-us/bug/unable-to-export-data-from-the-arcgis-survey123-website-bug-000156341.

There is also another relevant bug for exporting a CSV from an embedded web app in an Experience Builder app in ArcGIS Enterprise 10.9.1 with the following explanation: "For safety reasons, the embedded app in the ArcGIS Experience Builder Embed widget is constrained by the same-origin policy. For domains other than *.arcgis.com or *.esri.com, the sandbox attribute is automatically added, as stated in the following Embed widget documentation: https://doc.arcgis.com/en/experience-builder/configure-widgets/embed-widget.htm#ESRI_SECTION1_280578CCC46D4D41BD9C3C2FB0A02022 . To download embedded content, the 'allow-downloads' property for the iframe must be supported, while the sandbox bans it. The CSV file cannot be downloaded because the domain in Portal for ArcGIS 10.9.1 is not a trusted domain. The CSV file can be downloaded if the portal has a trusted domain (for example, *.esri.com)."

The link to this bug is here: https://support.esri.com/en-us/bug/unable-to-export-a-csv-file-from-a-web-app-embedded-in-bug-000149298.

In your case, I would recommend reaching out to Esri Support or your local Esri distributor's support so they can confirm whether you can workaround this issue apart from switching to using an embedded Instant App from ArcGIS Online.

Please feel free to let me know if you have any further questions or concerns!

Charles Blanchard
Associate GIS Analyst, Esri Canada

mwartman_grey · Answer

Thanks for replying @Charles_Blanchard . I believe the bug you mentioned is different than what I'm seeing. I should have better described the issue. When clicking the 'Export' button in an ExB embedded Public Notification app, nothing happens. No error messages, no download, nothing. In the console is this error message:

So there seems to be a security setting that is disabling this. Is it possible to enable the 'allow-downloads' so that it works the same as the AGOL version?

cblanchard · Answer

Hi @mwartman_grey,

There is currently a documented bug regarding unexpected behaviour with CSV/PDF exports from the Public Notification ArcGIS Instant Apps Template on ArcGIS Enterprise 11.5. Here is a link to the bug: https://support.esri.com/en-us/bug/when-configuring-the-search-widget-with-layers-coming-f-bug-000180784.

Currently the bug has a Status of In Review, meaning that the bug is going through the review process to ensure its validity before it can be added to a release plan. This means that there is not currently an exact release number where this behaviour will be fixed. The listed workaround is to use the Draw a Point tool after running the search to select the correct polygon manually before exporting.

I apologize for any inconvenience this issue has caused with your workflows, and hope that this bug addresses the behaviour you are experiencing with your embedded Instant App. Please feel free to reach out if you have any further questions!

Warmly,

Charles Blanchard

Associate GIS Analyst - Esri Canada