topic Custom URLs in a Custom Attribute Dispay Pop-Up in ArcGIS Online Questions

Custom URLs in a Custom Attribute Dispay Pop-Up

bshepard — Wed, 12 Jun 2019 21:24:03 GMT

We need to create hyperlinks in pop-ups that deep link to internal applications. Why does ArcGIS Online allow me to configure a hyperlink with a custom URL, but then changes the protocol to http:// when I save?

I need to be able to create a clickable link in a pop-up with cwsphoto://{Field1}/{Field2}?{Field3}&{Field4}. Not all URLs use http protocol.

Re: Custom URLs in a Custom Attribute Dispay Pop-Up

DouglasCochran — Fri, 14 Jun 2019 17:33:03 GMT

Please refer to the following link on supported HTML. This is done to prevent any HTML injection/security vulnerabilities.

https://doc.arcgis.com/en/arcgis-online/reference/supported-html.htm

HTML tags not listed in the table are not supported and will be filtered out.
Allowed protocols for href and src are https, http, tel, and mailto.

Hope that helps!

Re: Custom URLs in a Custom Attribute Dispay Pop-Up

bshepard — Mon, 17 Jun 2019 23:52:49 GMT

This has been a recurring issue with various ESRI apps and results in huge inefficiencies for our staff. We have two custom iOS applications that are sideloaded onto devices using a MDM. Our apps and URI schemes have been validated by Apple. How do we go about getting those schemes whitelisted by ESRI?

Thanks,

Brian

Re: Custom URLs in a Custom Attribute Dispay Pop-Up

NicolasGIS — Thu, 17 Jul 2025 09:19:37 GMT

Hi there,

Facing the same issue. Needed to add a deepLink in a popup in order to open a custom desktop application in my case.

Found this interesting article about how to bypass the Maps SDK for javascript HTML sanitizer:

https://www.esri.com/arcgis-blog/products/js-api-arcgis/mapping/using-html-with-popups-in-the-arcgis-api-for-javascript

Downside is that you need to code that instead of the no code configuration offered by ArcGIS Online's mapViewer but still a workaround is available.

Thought it would an interesting reference for anyone stumbling on this issue.