Search Results

Issue Can the derivatives unsafe-eval and unsafe-inline be exploited? If yes, how it is done? What is the residual risk associated with this? Can Content Security Policy (CSP) be resolved by adding a reverse Proxy? Environment Liferay DXP [all versions] Resolution Unfortunately, the DXP...

Issue Guest users should not be able to see the extend_session message in the browser once the session has expired. Environment Liferay DXP [7.1-7.4, Quarterly Releases] Resolution Post observing the time frequencies in the snapshot, it is seen that every request has around the interval...

Issue User creates an embedded page, so the URL under the Layout section will be present in which database table and column. Steps to follow: 1. Start the server. 2. Navigate to the Site Menu > Pages. 3. Create a new 'Embedded' page and publish it. 4. Now, click on the three-dots of the...

Issue Is Github Copilot supported with Liferay IDE? Environment Liferay IDE / Liferay Developer Studio Resolution Liferay does not recommend or allow AI-generated code to land in their codebase. However, if someone likes to use Copilot or any other tool to generate the code that runs on...

Issue Can users give permission to the guest users to use the headless API to create, update, delete, etc. for documents & media, besides just the VIEW permission? Environment Liferay DXP 7.4 Resolution These actions are disabled by default on purpose for guest users: <guest-unsupported>...

Issue We've been made aware of a vulnerability: NVD - CVE-2022-1471 NVD - CVE-2017-18640 NVD - CVE-2022-25857 Environment Liferay Workspace (gradle v10.1.3) Resolution Jackson Dataformat YAML Dependency: The Liferay Workspace uses jackson-dataformat-yaml for parsing YAML files. While...

Issue An attribute polyfill:true is observed in the source code of the website. Does it have anything to do with the domain 'https://polyfill.io'? Is Liferay affected by the Polyfill.js vulnerability?  Environment All environments [DXP 7.0 - DXP 7.4] Resolution Polyfill is a common...

Issue We would like to use Azure Blob Storage for documents and media, as described at https://learn.liferay.com/web/guest/w/dxp/system-administration/file-storage/other-file-store-types/microsoft-azure-blob-storage Currently we use the azure account key as authentication for connecting...

Issue Will special characters be scoped at site level and not only instance level per LPS-78008? Environment Quarterly Releases  Resolution After further review, it has been confirmed that LPS-78008 will not be implemented. The request simply does not align with Liferay's focus of...

Issue After approving a document, I'm not able to see if it was previously approved or rejected. In previous versions of Liferay DXP, users could see the entire history of a task assigned to them in the workflow. When a web content or document goes through the workflow process, there is...

Issue When we try to add some extra lines of code (output.innerHTML="";) in the web content, it is not working as expected and the innerHTML is getting removed. We are taken to the first line of the code resulting in not being able to edit the code related to innerHTML. Environment...

Issue 'lastPublishDate' column is showing as NULL in 'DLFileEntry' table. According to the use case, users need to show the last publish date of the document. Environment Liferay DXP 7.3 Liferay DXP 7.4 Resolution 'lastPublishDate' value will only be shown when a document is published to...

Issue After running a scan, we received an alert about a possible vulnerability in Liferay. We want to confirm if we are vulnerable to CVE-2023-50164. Environment All environments. Resolution Liferay is not vulnerable as it does not use the Struts upload feature. Additional Information...

Issue I'd like to inquire about the support for Liferay 7.4 in the Liferay Sync. Currently, the Compatibility Matrix only lists support for Liferay DXP 7.3. Environment Liferay DXP 7.4+ Resolution Liferay Sync got deprecated in 7.3 without direct replacement. The feature is in archived...

Issue Allow users to access the object in edit mode from the workflow task screen Environment Liferay DXP 7.4 Resolution As of now (at the time of creating this article), there is no OOB (out-of-the-box) way available to update object entries from the workflow task screen. As a result, a...

Issue In previous versions of Liferay DXP, users could configure portlets such as the Asset Publisher on a content page (blank page) without needing to enter the "edit" view. Environment Liferay DXP Quarterly Releases Resolution This is expected behavior, as editing a content page...

Issue When I try to create an object with an upload field, and save a new item multiple times, the object is only displayed once in the administration view. The uploaded item is not cleared from the field either. Is this the expected behavior? Environment Liferay DXP Quarterly Release...

Issue Can we enable users to create organizations that are at a higher level in the hierarchy than their own membership?   Example: Parent > Organization > Child Organization > Child Organization 2.0 Can a user belonging to the "Child Organization" create organizations like...

Issue Removing a group from LDAP does not remove the related user group imported in Liferay DXP's database. Environment All Liferay DXP environments Resolution This is the intended behavior. The user group has to be removed manually.    , knowledgeArticleType: reference, legacy: true,...

Issue Is there a maximum number of calls to the headless API before performance degrades? Environment Liferay SaaS Liferay PaaS Resolution We cannot specify a maximum number of calls that would avoid performance issues. However some guidelines can be provided to help understand the...