Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
The account email address is set to null
Issue When updating a custom field at the account entry, the account email address is set to null Steps to reproduce: Create a new Account, “Account”. Attach an e-mail address “abc@liferay.com” to the account entry...
Upgrade Bootstrap version from 4.x.x to 5.x.x
Issue When can we expect the support for Bootstrap 5.3.3 in the Liferay? Environment Liferay DXP [all versions] Resolution From DXP 7.4, Liferay no longer use or support jQuery-based plugins that include Bootstrap....
globalThis.process?.argv object contains an array set
Issue The globalThis.process?.argv object contains an array set in DXP 7.3, but in the latest release 2024.Q2.6, this is null or undefined.  Environment Liferay DXP [all versions] Resolution In this scenario,...
Error during file indexing: ClassNotFoundException: org.bouncycastle.asn1.ASN1Encodable
Issue When indexing files, the process fails (terminates abruptly) and the following information is printed in the logs: org.bouncycastle.asn1.ASN1Encodable cannot be found by...
How to change the . (dot) characters to hyphens (-) in Web Content article friendly URLs?
Issue We have several Web Content articles where the friendly URL contains some dots and we would like to have hyphens instead. Changing them manually is not only hard but we would also like to implement a workflow to...
The PageId changes each time the page is edited causing the category filter value to change each time.
Issue We are building a page which displays a Collection of “How to” Web Contents using a variety of Categories. As an alternative to using the Collection Filter to display the content of one category, we would like to...
Repeatable Form Fields take more than One-Click to Repeat
Issue When adding repeatable fields in a form, the form fields take more than one click to repeat   Environment Liferay 2024.Q1 Resolution This behavior is intended and introduced as a result of LPD-1720 When rapidly...
Content Pages and Fragments are not getting indexed after Saving
Issue We are using Remote Elasticsearch, and noticed that it does not index content page or fragment on save Once we add or update a HTML fragment on a content page, the page will not be returned, when searching...
Check plan MALUs (Monthly Active Logged in Users) in Liferay SaaS
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue A client of Liferay SaaS needs to check the metrics for MALUs...
Document and Media Storage Breakdown on cloud shell
Issue There is an issue with the breakdown of document_library storage. In certain cases, document media occupies a larger amount of space, causing the cloud shell to become unresponsive and consume excessive CPU...
Is it expected for fragments using the getContent() selector to display non-alphanumeric characters from HTML, or XML, for Journal Article content?
Issue When creating a Fragment with an itemSelector field configured to select a Journal Article, the displayed content includes unexpected characters, such as "]]>" at the end. This issue does not occur when the...
Language Keys are processed as Literal Text in custom MVC Portlets
Issue When creating a MVC Portlet that leverages language keys, language key output is presenting as the literal text, rather than the key value For example:  Language key in view.jsp: <b><liferay-ui:message...
Accessibility issues with the Underline button in CKEditor
Issue When using CKEditor, there is an underline button available. If you use it, the text will be inserted within u elements. This fact causes some HTML validators to report an accessibility issue based on WCAG SC...
Custom Themes are no longer shown as Site Templates in DXP 7.4
Issue In Liferay DXP 7.3, custom themes were seen under Site Templates Pop Up (Control Panel > Site > Choosing the template). However, in Liferay DXP 7.4, custom themes do not come under Site Templates, and...
Vulnerability: Robots.txt file must not be accessed and should be blocked
Issue Encountered a vulnerability issue with the robots.txt file and the vulnerability test suggests preventing the robots.txt file from being accessed. Environment Liferay DXP 7.3 Liferay DXP 7.4...
Calling UserImporter in com.liferay.portal.security.exportimport.api throws unsatisfied references error.
Issue On 7.3 we are using this class to Import users from a SamlProvider: com.liferay.portal.security.exportimport.UserImporter.importUser(long companyId, String emailAddress, String screenName) We call the service by...
Error "Portlet is temporarily unavailable" appears for Category Facet widget
Issue When an invalid ID is passed as the value of the category field in the URL, all the widget shows the error "Portlet is temporarily unavailable". As a result, all the widgets should show the message "No...
Not able to paste image directly into the CKEditor (Web content)
Issue Not able to directly paste the image in CKEditor (Webcontent). Steps to Reproduce: 1. Start Liferay Quarterly Release 2023.q4.4. 2. Navigate to Product Menu > Web Content > Click 'New Button' and then...
How to run Gradle Build for offline Environment?
Issue How to build the Gradle workspace offline? Environment Liferay DXP 7.3 Liferay DXP 7.4 Resolution The below points cannot be consider official solutions. Please take these as simple suggestions that...
Dump of a Single Table from Liferay Database in PaaS
Issue How we can take the dump from the Liferay database of a particular table? Environment Liferay DXP 7.4 Resolution The Liferay DXP Cloud product doesn't offer such a possibility to take the dump of a...
Facing UI error in the AI creator when adding the API key
Issue AI creator is not working; it is showing the UI error when adding the API key to the Liferay instance. Steps to reproduce: 1. Start the server. 2. Navigate to the Global Menu → Control Panel tab → Instance...
Additional user who can read the log file for the build in Jenkins (PaaS)
Issue An additional user in Jenkins is required (other than the default one with user ID 'customer') who can read the log file for the build. Environment Liferay DXP 7.4 Resolution The CI service (Jenkins)...
GitHub Token Leak Exposure
Issue GitHub Personal Access Token has been leaked in a public Docker container hosted on Docker Hub. Some of the malicious packages like testbrojct2, proxyfullscraper, proxyalhttp and proxyfullscrapers work...
Builds fail due to org.jenkinsci.plugins.github_branch_source.ApiRateLimitChecker$RateLimitCheckerAdapter checkRateLimit
Issue Jenkins is failing while creating the DXP cloud build and the following errors are observed: ERROR: org.jenkinsci.plugins.github_branch_source.ApiRateLimitChecker$RateLimitCheckerAdapter...
SSL errors when configuring a private repository in Liferay PaaS
Issue You are using a private repository and while trying to configure it for the CI service you notice the webhook is not automatically created Also the following logs are shown in the INFRA environment Aug 13...
HTTP Strict-Transport-Security Header in Liferay
Issue Is HTTP Strict-Transport-Security Header enabled in Liferay? Environment Liferay DXP 7.4 Resolution Liferay enables HTTP security headers such as 'http.header.secure.x.content.type.options',...
How to choose a default layout template
Issue We wonder if it is possible to configure a default layout to be chosen when a new widget  page is being created. Normally we do not use OOTB Liferay layouts, using our own developments instead (the red ones)....
Accessing Sitemap of a Child Site
Issue Is the sitemap of a child site separate from the parent site? How to access the sitemap of the child site? Environment Liferay DXP 7.4 Resolution A child site is similar to a parent site, they help to...
Is it possible to search web content using wildcards or a 'contains' clause?
Issue Entering keywords in the search bar can only search for the Web Content at the beginning of the keyword. For example, if there’s a web content named “Text_name”, the users can find the web content typing “text”...
No Documents are returned when using a Filter through Headless API
Issue I am able to retrieve documents using the Headless API successfully if no Filters are specified. However, when using a Filter, no results are returned. This might happen when working with endpoints like...
Form View in Workflow
Issue When an admin receives the multi-step form created by Objects to review, the form data is visible on a single page instead of page by page. Steps to reproduce: 1. Create a multistep form with the help of...
ElasticsearchStatusException: Action/metadata line [1] contains an unknown parameter [_type]
Issue When upgrading our Cloud Stack, we have found a problem with the Search Service. The following error is shown in the logs: Caused by: java.lang.RuntimeException: ElasticsearchStatusException[Elasticsearch...
Listing URL-s from Sitemap.xml
Issue Does Liferay have any tools or scripts which will allow us to get a list of all the URLs which are included in the full site map? Additional Information Change the Sitemap format in Liferay DXP: By default, the...
HTTP Security Headers Missing on 404 pages
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue While adding the below security headers in nginx.conf file...
Remove the Site Name and Portal Name from the Browser Title
Issue While hovering the mouse on a browser tab of any page, it displays the "Page Name - Site Name - Portal Name". How to remove the Portal Name part from it? Environment Liferay DXP 7.4 Resolution Create the...
DefaultValue in structures with repeatable fields are incorrect
Issue Default values in structure with repeatable field don't work as expected. After creating an exporting a structure with a repeatable field, the default value is empty, despite being defined in the...
module java.base does not "opens java.lang" error in buildService using Java 21
Issue The following exception is thrown when trying to build a service with Service Builder: Failed to initialize ClearThreadLocalUtil java.lang.ExceptionInInitializerError at...
ORA-00972: IDENTIFIER IS TOO LONG
Issue When using Oracle 19c as the database, setting the compatible version to 12.1.0.2 or lower can lead to errors under certain circumstances, such as when publishing an object that has relationships...
Admins can't sign in when LDAP Required is enabled if they only exist in Liferay but not in LDAP
Issue When LDAP is configured with the option Required, admin users that exist in Liferay but not in LDAP are not able to log in. Environment Quarterly Release 2024.Q2 Resolution As indicated in the documentation,...
When using Liferay Objects, the pages are inaccessible when viewed from the ellipses menu
Issue When using Liferay Obejcts with enough Objects to where the ellipses menu is necessary (7 pages), the pages shown when clicking on the ellipses are inaccessible.  The pages are only accessible if they are...