Issue
-
The title of a Liferay instance is being appended to the page titles of its child sites:
<title>Page title - Site title - Instance title</title>
-
Is there any out-of-the-box way to hide it on all sites as well as on a particular site so the title looks like this?
<title>Page title - Site title</title>
-
We consider this a security issue because a Liferay instance has an empty default site and several subsites. The name of the empty default site will still be visible for a potential attacker on every subsite and give them a hint about which sites belong to the same instance.
Environment
- DXP 7.3
Resolution
- This is the intended behavior.
- The company's name is being displayed in the tag title since at least 21-04-2006. So based on this, we do not think that the presence of this value is not a security bug per se, but it could be seen as such depending on the specific customer requirements, especially when they want to use the same company to create a bunch of non-related, independent sites.
- At the same time, the current behavior could be seen as desirable by customers who have a group of related sites.
- Given that both options seem to be reasonable, this part of the title could be configured per company and/or per site.
Feature Request
There is an ongoing feature request to modify the current behavior:LPD-15503 New SEO Configuration at a Site level