{"id":77261,"date":"2017-06-06T07:35:55","date_gmt":"2017-06-06T07:35:55","guid":{"rendered":"http:\/\/www.esri.com\/arcgis-blog\/products\/product\/uncategorized\/an-important-message-about-web-security-and-story-maps\/"},"modified":"2021-04-29T08:08:57","modified_gmt":"2021-04-29T15:08:57","slug":"an-important-message-about-web-security-and-story-maps","status":"publish","type":"blog","link":"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps","title":{"rendered":"An Important Message About Web Security and Classic Story Maps"},"author":5441,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"_acf_changed":false,"_searchwp_excluded":""},"categories":[37131],"tags":[24071],"industry":[],"product":[36551,36611],"class_list":["post-77261","blog","type-blog","status-publish","format-standard","hentry","category-constituent-engagement","tag-security","product-arcgis-online","product-story-maps"],"acf":{"short_description":"Please read this important message as it may require you to take action and change how you build story maps...","flexible_content":[{"acf_fc_layout":"content","content":"<p><strong>Note<\/strong>: This blog covers the classic Esri Story Maps. Story authors are encouraged to use the new\u00a0<a href=\"https:\/\/www.esri.com\/en-us\/arcgis\/products\/arcgis-storymaps\/overview\">ArcGIS StoryMaps<\/a> to create stories; however, Esri will continue to maintain the classic templates for your use. For more information, see the <a href=\"https:\/\/www.esri.com\/en-us\/arcgis\/products\/arcgis-storymaps\/product-road-map\">Product road map<\/a>.<\/p>\n<hr \/>\n<blockquote>\n<p style=\"text-align: center;\"><strong>Attention Story Map Authors:<\/strong><\/p>\n<p style=\"text-align: center;\"><strong>Please read this important message as it may require you to take action and change how you build story maps.<\/strong><\/p>\n<\/blockquote>\n<p>When you make a story map, you expect it to work and that your audience will be able to use it for a long time after you publish it. But story maps are web apps that readers access using a web browser, so your stories are subject to the different and evolving security features of each browser. Sometimes the mission of web browsers to keep users and their information safe can affect your readers&#8217; ability to access and enjoy your story map as you intended.<\/p>\n<p>The purpose of this post is to let you know we are working to help minimize the negative impacts of these situations and that there are things you may need to do to ensure your stories continue to work as browsers implement new, more stringent security features.<\/p>\n<p><span style=\"color: #ffffff;\">***<\/span><\/p>\n<h2>What is Esri doing?<\/h2>\n<p>To help you build stories that work with web security standards now and in the future, the Story Maps Team has a plan to migrate all our apps to require\u00a0<span style=\"color: #339966;\">HTTPS<\/span>\u00a0for both building and viewing stories. This means a story map app and all content (images, videos, map layers, web pages and apps) loaded within it must be accessed using <span style=\"color: #339966;\">HTTPS<\/span> URLs.\u00a0We want this transition to be as smooth as possible, but some of the planned changes have the potential to break stories you have already published, so we want to make you aware of the plan to provide plenty of time to address any issues.<\/p>\n<p>We&#8217;ll begin to roll out incremental changes to our apps <del>later this year<\/del>\u00a0in 2018 that will help you make the transition. In the first phase, story map apps will begin to require you to provide\u00a0<span style=\"color: #339966;\">HTTPS<\/span> links for embedded content, and we&#8217;ll provide tools to scan your stories for <span style=\"color: #ff0000;\">HTTP<\/span>\u00a0links.<\/p>\n<p>We plan for all story map apps to require\u00a0<span style=\"color: #339966;\">HTTPS<\/span>\u00a0in <del>the first half of<\/del> 2018. At that time, we will have story map apps automatically switch any remaining\u00a0<span style=\"color: #ff0000;\">HTTP<\/span>\u00a0content links to\u00a0<span style=\"color: #339966;\">HTTPS<\/span>. While this will alleviate issues in many situations, it&#8217;s unfortunately not that easy. If the content embedded in your story is hosted on a server that doesn&#8217;t support\u00a0<span style=\"color: #339966;\">HTTPS<\/span>, the story will break. We recommend you follow the instructions in this blog and take advantage of the tools that are forthcoming to check your stories and address any issues before this change is implemented.<\/p>\n<p><em>This issue affects all authors and users of story maps and is independent of whether your administrator currently requires traffic to your ArcGIS Online organization to be over\u00a0<span style=\"color: #339966;\">HTTPS<\/span>.<\/em><\/p>\n<p><span style=\"color: #ffffff;\">***<\/span><\/p>\n<h2>What do you need to do?<\/h2>\n<p>The two main things you need to do are:<\/p>\n<ul>\n<li>Always use <span style=\"color: #339966;\">HTTPS<\/span> links for content that you add to a story map, including images, videos, layers, and embedded apps and web pages.<\/li>\n<li>Review your existing story maps to identify any embedded content that uses\u00a0<span style=\"color: #ff0000;\">HTTP<\/span> links and update those links to <span style=\"color: #339966;\">HTTPS<\/span>.<\/li>\n<\/ul>\n<p>If any embedded content in your existing stories does not work after the link is changed to\u00a0<span style=\"color: #339966;\">HTTPS<\/span>\u00a0you can either:<\/p>\n<ul>\n<li>Update the server to support HTTPS<\/li>\n<li>Move the content to a different server that supports\u00a0<span style=\"color: #99cc00;\"><span style=\"color: #339966;\">HTTPS<\/span>\u00a0<\/span>and update the link in your story<\/li>\n<li>Add a link in your story narrative that opens the content in a new browser tab (rather than embedding it in the story)<\/li>\n<li>Find replacement content that supports <span style=\"color: #339966;\">HTTPS<\/span><\/li>\n<li>Remove the content from your story<\/li>\n<\/ul>\n<p>Following these steps will ensure your new and existing stories will continue to work well for your readers. If you need help understanding why a server doesn&#8217;t seem to support <span style=\"color: #339966;\">HTTPS<\/span> or how you can host content on a secure server, check with your IT department.<\/p>\n<blockquote>\n<p style=\"text-align: left;\"><strong><span style=\"font-size: 16px;\">To summarize, we&#8217;d recommend that you:<\/span><\/strong><\/p>\n<p style=\"text-align: left;\"><strong><span style=\"font-size: 16px;\">\u00a0 \u00a01) immediately adopt the practice of using <span style=\"color: #339966;\">HTTPS<\/span> links for embedded content in new stories, and<\/span><\/strong><\/p>\n<p style=\"text-align: left;\"><strong><span style=\"font-size: 16px;\">\u00a0 \u00a02) begin the process of reviewing your existing stories \u00a0to find and address <span style=\"color: #ff0000;\">HTTP<\/span> links now.<\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: #ffffff;\">***<\/span><\/p>\n<p><em>That&#8217;s the crux of the matter, but we encourage you to read on for more information about these changes and how to address them&#8230;<\/em><\/p>\n<p><span style=\"color: #ffffff;\">***<\/span><\/p>\n<h2>What are http and https anyway?<\/h2>\n<p>They are protocols that define how information is sent between your computer and other computers on the web. <span style=\"color: #339966;\">HTTPS<\/span> is a secure communications protocol, which means it&#8217;s encrypted and protects the information you are sending and receiving so that only the intended recipient can read it. There&#8217;s a lot more information about it <a href=\"https:\/\/en.wikipedia.org\/wiki\/HTTPS\" target=\"_blank\" rel=\"noopener\">on Wikipedia<\/a>, if you are interested.<\/p>\n<h2>What should you do when creating new stories?<\/h2>\n<p>If you&#8217;ve uploaded images in a story map builder or used images stored as items on arcgis.com you have nothing to worry about. For any new stories you create,\u00a0uploading images in the story map builder is recommended as the easiest, best, and most secure way to add images to your stories.<\/p>\n<p>If you need to use images that are hosted somewhere else on the web, then<strong>\u00a0<\/strong>use <span style=\"color: #339966;\">HTTPS<\/span> URLs when adding images to new story maps you create. This includes pasting a link to a logo for your story map header or adding an image anywhere in the body of your story.<\/p>\n<p>Also use <span style=\"color: #339966;\">HTTPS<\/span> URLs when adding any content that will be loaded inside your story map. This includes &lt;iframe&gt; code for a dynamic chart from a third-party service, a URL to an audio file, or service URLs for GIS server layers in maps or scenes.<\/p>\n<p><span style=\"color: #ffffff;\">***<\/span><\/p>\n<h2>What about stories you&#8217;ve already published?<\/h2>\n<p>Go back through any story maps you have shared with the public and <strong>look for any <span style=\"color: #ff0000;\">HTTP<\/span> URLs pointing to images, videos, map layers, web apps, or web pages<\/strong>. You can safely ignore <span style=\"color: #ff0000;\">HTTP<\/span> links for content hosted on arcgis.com. You can also ignore\u00a0content that you have hyperlinked to; for example, if you created a text hyperlink to a PDF report that <em>opens in a new browser tab<\/em> that link can be <span style=\"color: #ff0000;\">HTTP<\/span> or <span style=\"color: #339966;\">HTTPS<\/span>. You only need to be concerned with content that is loaded inside your story map that is hosted outside the arcgis.com domain.<\/p>\n<p>If you find content with an\u00a0<span style=\"color: #ff0000;\">HTTP<\/span> link that is hosted outside of arcgis.com you&#8217;ll need to either update the server with a valid certificate so that it will support <span style=\"color: #339966;\">HTTPS<\/span> or find an alternate way to host the content securely.<\/p>\n<p>If the content is an image you can upload it in the story map builder or host it on a different web server that does support <span style=\"color: #339966;\">HTTPS<\/span>. If the content is a GIS service the recommended path is to update the server to support <span style=\"color: #339966;\">HTTPS<\/span>. If that is not feasible you can publish the data to ArcGIS Online or to a server that does support <span style=\"color: #339966;\">HTTPS<\/span>. If you do republish the data somewhere else you&#8217;ll need to update the URLs in all web maps that use that layer.<\/p>\n<p>When updating an existing server to support <span style=\"color: #339966;\">HTTPS<\/span> the URL to your content may change (for example, if the port number is included in the URL). In these cases you&#8217;ll need to update the URLs in your story.<\/p>\n<p><span style=\"color: #ffffff;\">***<\/span><\/p>\n<h2>Can you give me examples of how a browser&#8217;s web security features can affect a story map?<\/h2>\n<p>In some cases the problem is obvious, such as when the content embedded in your story map doesn&#8217;t even load. See <a href=\"https:\/\/blogs.esri.com\/esri\/arcgis\/2017\/05\/05\/troubleshooting-embedded-apps-and-websites-in-story-maps\/\" target=\"_blank\" rel=\"noopener\">this blog<\/a> for information about these types of situations and how to troubleshoot them. In other cases, however, the affects are more subtle.<\/p>\n<p>For example, Safari recently began blocking the use of its geolocation feature\u00a0if any content &#8212; even a single image &#8212; is loaded over an non-secure (<span style=\"color: #ff0000;\">HTTP<\/span>) connection. Geolocation is blocked even if the web page itself is loaded over a\u00a0secure (<span style=\"color: #339966;\">HTTPS<\/span>) connection. Let&#8217;s say you created a story using the Story Map Tour app. When you were adding your organization&#8217;s logo to the header you pasted in an\u00a0<span style=\"color: #ff0000;\">HTTP<\/span>\u00a0link to the logo image. This means that anyone trying to use to your story over <span style=\"color: #339966;\">HTTPS<\/span> using an iPhone or iPad won&#8217;t be able to tap the &#8220;locate me&#8221; button to locate themselves on the map. While your app will still work in this case, it&#8217;s not providing the intended experience for your readers.<\/p>\n<p>Web browsers are constantly implementing new security features like this to keep users safe. The issue mentioned in this example may only affect Safari users today, but soon other browsers are likely to implement this safety measure as well.<\/p>\n<h2>Have questions?<\/h2>\n<p>If you have questions about this issue or how it may affect you, please post them on\u00a0<a href=\"https:\/\/geonet.esri.com\/community\/gis\/web-gis\/storymaps\" target=\"_blank\" rel=\"noopener\">GeoNet<\/a>.<\/p>\n<p><em>This blog was originally published in June 2017 and was updated in December 2017.<\/em><\/p>\n"}],"authors":[{"ID":5441,"user_firstname":"Owen","user_lastname":"Evans","nickname":"Owen Evans","user_nicename":"oevans","display_name":"Owen Evans","user_email":"OEvans@esri.com","user_url":"","user_registered":"2018-03-02 00:17:09","user_description":"Owen is the lead product engineer for ArcGIS StoryMaps and has been with Esri since 2004. Before joining the StoryMaps team, he spent 11 years as a solution engineer on Esri's National Government team helping people understand the value and utility of geospatial thinking.","user_avatar":"<img data-del=\"avatar\" src='https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/03\/OJE_FedGIS.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'\/>"}],"related_articles":"","card_image":false,"wide_image":false},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.9 (Yoast SEO v25.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>An Important Message About Web Security and Classic Story Maps<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"An Important Message About Web Security and Classic Story Maps\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps\" \/>\n<meta property=\"og:site_name\" content=\"ArcGIS Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/esrigis\/\" \/>\n<meta property=\"article:modified_time\" content=\"2021-04-29T15:08:57+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@ESRI\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps\"},\"author\":{\"name\":\"Owen Evans\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/1c03f5fff79ca526ad78318543fd3312\"},\"headline\":\"An Important Message About Web Security and Classic Story Maps\",\"datePublished\":\"2017-06-06T07:35:55+00:00\",\"dateModified\":\"2021-04-29T15:08:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps\"},\"wordCount\":10,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#organization\"},\"keywords\":[\"Security\"],\"articleSection\":[\"Constituent Engagement\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps\",\"name\":\"An Important Message About Web Security and Classic Story Maps\",\"isPartOf\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#website\"},\"datePublished\":\"2017-06-06T07:35:55+00:00\",\"dateModified\":\"2021-04-29T15:08:57+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.esri.com\/arcgis-blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"An Important Message About Web Security and Classic Story Maps\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#website\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/\",\"name\":\"ArcGIS Blog\",\"description\":\"Get insider info from Esri product teams\",\"publisher\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.esri.com\/arcgis-blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#organization\",\"name\":\"Esri\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png\",\"contentUrl\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png\",\"width\":400,\"height\":400,\"caption\":\"Esri\"},\"image\":{\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/esrigis\/\",\"https:\/\/x.com\/ESRI\",\"https:\/\/www.linkedin.com\/company\/5311\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/1c03f5fff79ca526ad78318543fd3312\",\"name\":\"Owen Evans\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/03\/OJE_FedGIS.jpg\",\"contentUrl\":\"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/03\/OJE_FedGIS.jpg\",\"caption\":\"Owen Evans\"},\"description\":\"Owen is the lead product engineer for ArcGIS StoryMaps and has been with Esri since 2004. Before joining the StoryMaps team, he spent 11 years as a solution engineer on Esri's National Government team helping people understand the value and utility of geospatial thinking.\",\"sameAs\":[\"http:\/\/www.linkedin.com\/in\/owenjevans\",\"https:\/\/x.com\/OwenGeo\"],\"url\":\"https:\/\/www.esri.com\/arcgis-blog\/author\/oevans\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"An Important Message About Web Security and Classic Story Maps","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps","og_locale":"en_US","og_type":"article","og_title":"An Important Message About Web Security and Classic Story Maps","og_url":"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps","og_site_name":"ArcGIS Blog","article_publisher":"https:\/\/www.facebook.com\/esrigis\/","article_modified_time":"2021-04-29T15:08:57+00:00","twitter_card":"summary_large_image","twitter_site":"@ESRI","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps#article","isPartOf":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps"},"author":{"name":"Owen Evans","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/1c03f5fff79ca526ad78318543fd3312"},"headline":"An Important Message About Web Security and Classic Story Maps","datePublished":"2017-06-06T07:35:55+00:00","dateModified":"2021-04-29T15:08:57+00:00","mainEntityOfPage":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps"},"wordCount":10,"commentCount":0,"publisher":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#organization"},"keywords":["Security"],"articleSection":["Constituent Engagement"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps","url":"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps","name":"An Important Message About Web Security and Classic Story Maps","isPartOf":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#website"},"datePublished":"2017-06-06T07:35:55+00:00","dateModified":"2021-04-29T15:08:57+00:00","breadcrumb":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.esri.com\/arcgis-blog\/products\/story-maps\/constituent-engagement\/an-important-message-about-web-security-and-story-maps#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.esri.com\/arcgis-blog\/"},{"@type":"ListItem","position":2,"name":"An Important Message About Web Security and Classic Story Maps"}]},{"@type":"WebSite","@id":"https:\/\/www.esri.com\/arcgis-blog\/#website","url":"https:\/\/www.esri.com\/arcgis-blog\/","name":"ArcGIS Blog","description":"Get insider info from Esri product teams","publisher":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.esri.com\/arcgis-blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.esri.com\/arcgis-blog\/#organization","name":"Esri","url":"https:\/\/www.esri.com\/arcgis-blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png","contentUrl":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/04\/Esri.png","width":400,"height":400,"caption":"Esri"},"image":{"@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/esrigis\/","https:\/\/x.com\/ESRI","https:\/\/www.linkedin.com\/company\/5311\/"]},{"@type":"Person","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/1c03f5fff79ca526ad78318543fd3312","name":"Owen Evans","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.esri.com\/arcgis-blog\/#\/schema\/person\/image\/","url":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/03\/OJE_FedGIS.jpg","contentUrl":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2018\/03\/OJE_FedGIS.jpg","caption":"Owen Evans"},"description":"Owen is the lead product engineer for ArcGIS StoryMaps and has been with Esri since 2004. Before joining the StoryMaps team, he spent 11 years as a solution engineer on Esri's National Government team helping people understand the value and utility of geospatial thinking.","sameAs":["http:\/\/www.linkedin.com\/in\/owenjevans","https:\/\/x.com\/OwenGeo"],"url":"https:\/\/www.esri.com\/arcgis-blog\/author\/oevans"}]}},"text_date":"June 6, 2017","author_name":"Owen Evans","author_page":"https:\/\/www.esri.com\/arcgis-blog\/author\/oevans","custom_image":"https:\/\/www.esri.com\/arcgis-blog\/app\/uploads\/2025\/08\/Newsroom-Keyart-Wide-1920-x-1080.jpg","primary_product":"ArcGIS StoryMaps","tag_data":[{"term_id":24071,"name":"Security","slug":"security","term_group":0,"term_taxonomy_id":24071,"taxonomy":"post_tag","description":"","parent":0,"count":124,"filter":"raw"}],"category_data":[{"term_id":37131,"name":"Constituent Engagement","slug":"constituent-engagement","term_group":0,"term_taxonomy_id":37131,"taxonomy":"category","description":"","parent":0,"count":392,"filter":"raw"}],"product_data":[{"term_id":36551,"name":"ArcGIS Online","slug":"arcgis-online","term_group":0,"term_taxonomy_id":36551,"taxonomy":"product","description":"","parent":0,"count":2422,"filter":"raw"},{"term_id":36611,"name":"ArcGIS StoryMaps","slug":"story-maps","term_group":0,"term_taxonomy_id":36611,"taxonomy":"product","description":"","parent":36981,"count":572,"filter":"raw"}],"primary_product_link":"https:\/\/www.esri.com\/arcgis-blog\/?s=#&products=story-maps","_links":{"self":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/blog\/77261","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/users\/5441"}],"replies":[{"embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/comments?post=77261"}],"version-history":[{"count":0,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/blog\/77261\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/media?parent=77261"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/categories?post=77261"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/tags?post=77261"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/industry?post=77261"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.esri.com\/arcgis-blog\/wp-json\/wp\/v2\/product?post=77261"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}