I have updated most of our internal Maximo Application Instances to version MAS9.1. After setting up all my use cases again, I noticed that the maps weren't displayed anymore. After a frontend inspection (using the browsers inspect feature), I found that the content-src was blocking access to either .arcgisonline.com (Spatial), .openstreetmap.org and*.arcgis.com.
This is / was a known issue in both MX76 and MAS8.10 and solved in one of the patches, however it seems that this patch is overwritten by new spatial and map manager features. the work around is to open system properties, filter on system property mxe.sec.header.Content_Security_Policy.
Replace the content with this:
|
font-src 'self' data: https://1.www.s81c.com *.walkme.com; script-src
*.apps.mas9.znapz.net 'self' 'unsafe-inline' 'unsafe-eval'
*.salm.apps.mas9.znapz.net *.walkme.com *.apps.<yourdomainname>
*.qualtrics.com *.siteintercept.qualtrics.com https://1.www.s81c.com
*.ibm.com tags.tiqcdn.com *.trustarc.com; style-src *.apps.<yourdomainname>
'self' 'unsafe-inline' 'unsafe-eval' *.walkme.com
*.<yourdomainname> 1.www.s81c.com *.ibm.com tags.tiqcdn.com
*.tealium.com *.tags.tiqcdn.com *.trustarc.com
prefmgr-cookie.truste-svc.net; img-src *.<yourdomainname> 'self'
*.s<yourdomainname> d2qhvajt3imc89.cloudfront.net data: *.walkme.com
*.trustarc.com *.qualtrics.com *.siteintercept.qualtrics.com
*.arcgisonline.com *.openstreetmap.org *.arcgis.com *.arcgisonline.nl;
object-src 'self' *.salm.apps.mas9.znapz.net *.<yourdomainname> *.walkme.com;
worker-src 'self' blob: ; frame-src 'self' localhost:*
*.salm.apps.mas9.znapz.net *.walkme.com *.segment.com *.trustarc.com
*.qualtrics.com *.siteintercept.qualtrics.com *.ibm.com *.<yourdomainname>;
default-src https://* 'self' *.apps.<yourdomainname> *.<workspace>.apps.<yourdomainname>
*.tealium.com *.tags.tiqcdn.com; connect-src *.<yourdomainname> 'self'
*.<yourdomainname> *.qualtrics.com *.siteintercept.qualtrics.com
*.ibm.com *.walkme.com *.arcgisonline.com *.openstreetmap.org *.arcgis.com
*.arcgisonline.nl |
The example above also solved certain image and default source display issues