Search Results

All Results 57
ソート
Resource Type
Applicable Versions
Deployment Approach
Capability
Feature
0Auth2.0 issues new token every time even before token's expiration time
legacy
Issue The access_token expiration default is set to 10 minutes. When invoking the /oauth2/token before the previous token expires, a brand new token is issued instead of the original token.  Environment DXP 7.4...
Does having a script in a button fragment qualify as a potential XSS vulnerability?
legacy
Issue We can put a Javascript code in the Button fragment's URL field, so it can be executed when we click on the button, like javascript:alert(document.cookie) Can that be a vulnerability to Cross Site...
Does having a script in a fragment qualify as a potential XSS vulnerability?
legacy
Issue We can put Javascript code in a fragment's HTML section where the code can be executed, when the fragment is opened, like <img src=x onerror="alert(document.cookie)"> Can that be a vulnerability to...
When moving a web content to another folder, the modification date of the web content is updated
legacy
Issue When moving a web content from a folder to another, the modification date of all versions of the web content are updated. Is this an expected behavior? Environment Liferay DXP 7.2 Liferay DXP 7.3 Resolution...
Unable to save home page, must use unique friendly url
legacy
Issue Cannot save a public and private page with the same Friendly URL on DXP 7.3. Upon saving you get the following error: Please enter a unique friendly URL. Environment DXP 7.3  Resolution This is an intended...
Why does Language selector update the User?
legacy
Issue When the user uses the Language Selector Widget to change the language of the UI the portal updates the user The following module is visible in the stack trace: at...
Liferay accepts only fully signed SAML responses. Can this requirement be turned off?
legacy
Issue From a security standpoint, it's a best practice to sign the Response. However, we can switch off this requirement in our other apps. I can understand that Liferay by default requires the complete signature of...
Can a user group member assign the same role to users without having admin privileges?
legacy
Issue How can we allow the members of the user group "editors" to add / remove new users to their group without giving them administrator permissions? I would like the editors to be able to give the editor role to...
Issues with Form "Export"
legacy
Issue After one (or more) update of a specific form, the "Export" feature is not always able to export all the previously submitted data Environment Liferay DXP 7.3 Liferay DXP 7.4 Resolution Liferay UI prompts...
Set expiration on password reset URL for new accounts
legacy
Issue When a new user is created, the password set URL is sent to the new users' email but it doesn't has expiration.  Currently, reset password links can be set to expire with the following portal...
"Forced" re-assignment of a Workflow task
legacy
Issue Is it possible to re-assign a Workflow task? Consider the following scenario: A user assigns a workflow task to themselves This user resigns/disappears/goes on holiday without processing the task at hand...
Image URLs in headless API responses include the port number
legacy
Issue While using the headless API, users can see the port with the source URL.  Environment Liferay DXP 7.4 Commerce 4.0 Resolution This is the expected behavior as Liferay is either serving the full URL,...
File size UI message with web content
legacy
Issue When creating web content and selecting an image, users need to choose the standard image size. Currently, while selecting an image, the image size is not displayed. Environment Liferay DXP [all version]...
Upload same document in multiple languages
legacy
Issue Can the same document be uploaded in multiple languages? Environment DXP 7.3 Resolution Liferay DXP does not currently support this function, but there is currently a feature request for it to be added...
Content Page History
legacy
Issue We wanted to check with Liferay support if there is any functionality for viewing content page history or to revert back to previous version? Environment DXP 7.3 Resolution Liferay DXP does not currently...
Pagination for Collection Displays Missing
legacy
Issue The pagination option is missing from the display page templates. This missing feature causes the need to to update the number of items displayed in a feed on any given day, depending on priority. Asset...
Content Page matching multiple personal experiences
legacy
Issue If the user matches multiple experiences, is there a way to provide the option to the user to choose the personal experience from the matched personal experiences? Environment DXP 7.3 Resolution We...
Is ffmpeg viable in Liferay DXP 7.0?
legacy
Issue Is ffmpeg a viable alternative to Xuggler to stream audio and video in Liferay DXP 7.0? Environment DXP 7.0 Resolution Unfortunately, at this time FFMPEG is only compatible with Liferay 7.4. A...
Is Liferay SaaS/PaaS vulnerable to CVE-2023-20864 and CVE-2023-20865?
legacy
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Is Liferay SaaS/PaaS vulnerable to CVE-2023-20864...
Analytics Cloud: Can we use events in Segments for aggregated totals?
legacy
Issue Regarding the segmentation in events, there is a an event for assets, such as Documents viewed for documents. In order to use that, we have to select the asset to display the analysis. Is there any way where we...
What statistics are available for Message Boards are available in Analytics Cloud?
legacy
Issue We are about to launch an online community on our Liferay portal. How far do Liferay Analytics go supporting community reports and analytics? Environment DXP 7.0+ Analytics Cloud Resolution Currently, metrics for...
When you refer to "online community" in your Liferay portal, what do you mean exactly?
legacy
Issue When you refer to "online community" in your Liferay portal, what do you mean exactly? Environment Portal 6.1+ DXP 7.0+ Resolution Prior to Liferay Portal 6.1, there were two ways of creating sites: organizations...
Two Liferay instances with common database - updates sync
legacy
Issue We have two Liferay instances that use one database. If we work with Liferay instance 1 - import LAR file or make some changes in content (change a webcontent, create new page, upload an image etc) - will Liferay...
The validation message of some inputs doesn't mention the correct input name
legacy
Issue Fields marked as required and left empty when trying to submit a form or publish a folder display a different error message than what is expected: “This field is required”.  Environment DXP 7.4 U49+...
Logs tab is not being shown on Services pages
legacy
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue I can no longer see the Logs tab on Services pages from...
Mark searchable toggle button by default OFF while creating new web content
legacy
Issue We would like to mark the searchable toggle button switched OFF by default in basic web content while creating new web content. Currently, while creating new web content, the searchable toggle button is ON by...
Error with custom workflow when deleting/deactivating users
legacy
Issue We would like to know what happens when a user who has open workflow tasks is deactivated or deleted. We have seen that deleting or deactivating gives us an error for a open task that has a custom flow made by...
Does CVE-2022-47966 affect Liferay?
legacy
Issue Our security scan has shown CVE-2022-47966 as an active critical vulnerability. Is Liferay affected? Environment DXP 7.2 Resolution The out-of-the-box Liferay product is not affected by this vulnerability. So,...
user is unable to disable the 'Password Changed Notification' and 'Password Reset Notification'
legacy
Issue User is able to disable the 'Account Created Notification'. However, there are no options for turning off the 'Password Changed Notification' and 'Password Reset Notification' notifications. Environment...
How to provide permission to Fragments
legacy
Issue Does DXP have permission feasibility with fragments? Environment Liferay DXP  [all versions] Resolution There is no way to directly control the visibility of a Fragment depending on the user accessing the...
Product comparison bar not removing after refresh
legacy
Issue The product comparison widget bar is not removed after the refresh Steps to reproduce: 1) Created two simple products 2) Navigate to Minum Site and drag the 'Product Comparison Bar' on this page. 3) Now, try...
Where are comments entered by other users when assigning, approving, or rejecting workflow tasks managed?
legacy
Please be aware that the page you are viewing has been machine translated from Japanese into English and may contain some translation errors. If you observe any issues with the translation, please contact us....
Client's public IP is visible in source code
legacy
Issue User is able to see their own public IP while checking the source code of a page on the Liferay portal. Environment Liferay DXP 7.3 Liferay DXP 7.4 Resolution The public IP is visible through the...
SQL injection Sleepy user agent attack
legacy
Issue Liferay does not restrict a URL that has a 'sleepy user agent' query appended to it like: https://domain/page?1%2b(select*from(select(sleep(x)))a)%2b=1 Environment Liferay DXP 7.4 Resolution Sleepy user agent...
Editing or adding a document through D&M widget will redirect to DLAdminPortlet
legacy
Issue Add Documents and Media widget on a page Open the widget's configuration and activate "Show Actions" Click on "+" and upload a file (alternatively, edit a file) Result: The view will not open within the...
Existing role was updated/replaced by the role imported from lar
legacy
Issue Steps: Export a regular role from instance A and import it to instance B. Modify the name of the regular role on instance B. Exported the regular role from instance B and imported it to instance A. Expected result:...
Can I select mutiple images when inserting image in the Web Content
legacy
Issue Can I select multiple images for insertion in html field/rich text field in the Web Content? Environment Liferay DXP 7.1 Liferay DXP 7.4 Resolution The inline editor (Alloy Editor, CKEditor) will insert the image...
How do Segments sync between Liferay and Analytics Cloud?
legacy
Issue We created a segment in Liferay but it has not synced yet. How can we sync it to Analytics Cloud? Environment Analytics Cloud DXP 7.3+ Resolution The sync only happens one way: from Analytics Cloud to Liferay. So...
Security Issue: Admin URL is exposed in the Guest view of the Home page
legacy
Issue The line below can be found on pages where guest users should not see confidential data. getSiteAdminURL: function() { return...
sr-only elements
legacy
Issue class="sr-only" elements can be observed in the HTML of my pages. Environment Liferay DXP 7.3+ Resolution Does not need to be removed and it is not malicious. It is implemented by the changes made on LPS-118487...