Journal Story Map won't open esri.com

1344
5
01-04-2018 01:32 PM
MeganClick
New Contributor II

I am trying to put together a story map journal to use for a presentation to my fellow faculty members. The purpose of the presentation is to inform the faculty members of the benefits of the Esri Educational Site license and ways in which GIS training, and classroom resources can be utilized across all disciplines. The presentation focuses on Esri training, Esri press, ArcGIS online, etc.

I can link ArcGIS online as the Main Stage website for the section. I can also type in https://www.esri.com/industries and it will link to the story map.

My problem is when I attempt to link any variation of the home page or training page of the esri website it won't populate in the story map. I have tried both web page link and embed code. I have tried both http: and https: versions to no avail. Variations is have tried are https://www.esri.com, https://www.esri.com/en-us/home, https://esri.com, http://www.esri.com, https://www.esri.com/en-us/home, https://esri.com

I read on a help site about disabling the https for the organizational account, which I did; however this doesn't seem to fix the problem with the main esri page not wanting to load or display in a story map journal. 

0 Kudos
5 Replies
StephenSylvia
Esri Regular Contributor

Hi Megan, esri.com recently changed their policy to not allow websites to embed our pages. This is a web security best practice that prevents a few specific vulnerabilities that hackers can take advantage of. I've contacted our server team to see if they are willing to whitelist some domains so we can still allow you to embed it in our story maps. If they change this policy, I'll let you know.

For the time being, you can still add a link that will open the page in a new tab. You can also make the main stage a screen-shot of the website or another image related to the web site you are showing so it is topical. If you want your link to stand out more like a button, try this tutorial we put together: https://developerscorner.storymaps.arcgis.com/create-buttons-for-main-stage-actions-using-the-style-....

PeterKnoop
MVP Regular Contributor

This is a disappointing. Like Megan, we regularly use Story Maps for presentations to get people excited about the ArcGIS Platform. Being able to navigate the content smoothly, without leaving the framework of the Story Map, having to navigate back/and forth between other browser tabs or windows or loosing valuable screen real-estate, was a great benefit.

Not all of the Esri content has been broken yet in our presentations, however, do you know if this same best practice will be applied across all Esri sites eventually? 

For instance, a quick check of one presentation shows that most of the content is still working, such as the Living Atlas (https://doc.arcgis.com/en/living-atlas/about/), Learn ArcGIS (https://learn.arcgis.com), and product home pages like ArcGIS Pro (https://www.esri.com/en/arcgis/products/arcgis-pro/overview) or Collector for ArcGIS (https://www.esri.com/products/collector-for-arcgis).

I'll also note that "http://www.esri.com" is the example text in the URL field in (all?) Story Map apps. So, if you enter that URL -- maybe this is your first time with Story Maps and you're just keeping things simple as you explore -- then it won't work.

Furthermore, most users won't have any indication as to why it's not working, as there is no warning or error displayed, they are just presented with a blank screen. They would have to be know enough to open their browser's console to find the error (e.g., "Refused to display 'https://www.esri.com/en-us/home' in a frame because it set 'X-Frame-Options' to 'sameorigin'.") 

Perhaps Story Maps could being testing the X-Frame-Options setting for a site as part of the validation steps when you're entering the URL? Then you could let users know when they've entered one that is set to sameorigin, or otherwise restricted, and will not work.

MeganClick
New Contributor II

Thank you so much for your quick response! I really appreciate your help. It is disappointing that I can't link the website directly; however I do understand security features. In hind sight I should have posted this question three days ago rather than driving myself crazy trying to get it to work. I agree with Peter that perhaps the example using https://www.esri.com in the link box be changed in order to prevent any future confusion. I believe that www.arcgis.com would be a suitable replacement since it will link directly. I will proceed with using screen shots and providing links in the text as a replacement. Thank you again!

0 Kudos
OwenGeo
Esri Notable Contributor

Megan/Peter -- Thanks for your feedback. While looking into this we also noticed that www.esri.com is no longer a good choice for the example link and plan to change that at the next release.

Peter -- We would love to warn story map authors when they attempt to embed a web page that restricts embedding, but unfortunately there isn't a reliable way for an app to read the X-Frame-Options client side. We do have some other ideas to improve this experience and will look into those for a future release.

Owen Evans
Lead Product Engineer | StoryMaps
MeganClick
New Contributor II

I delivered the presentation yesterday and I'm pretty pleased with how the story map turned out. Everyone was impressed with the resources available. They seemed excited about the possibility of using story maps as opposed to power point or other presentation methods for in class lectures and presentations. Here is the link: https://mountwest.maps.arcgis.com/apps/MapJournal/index.html?appid=e554ece4d4b845f391f2fdf4b5d3e476