Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Content page displays wrong title when special characters are used on it
Issue If the title of a Content page has special characters on it, the title will then be displayed with "&". This usually happens when you place the character "&". For example: "Documents & Media", in...
Does CVE-2016-1000027 affect Liferay?
Issue Security scan shows CVE-2016-1000027 as an active vulnerability, is Liferay affected? Environment DXP 7.4 Resolution CVE-2016-1000027 is known to us, and we can confirm that Liferay should not be vulnerable, as...
Insecure HTTP methods
Issue HTTP methods like HEAD, OPTIONS, TRACE may provide information about the application that can be used in attacks like XST, CSRF, steal of sensitive information. How we can disable insecure/unnecessary http...
SEO - Titles in Google's search results page don't display expected text
Issue After configuring the "Title SEO" of a page, Google and other search engines don't display the value as-is. If we use a customization to remove the Site and Instance names, they keep showing in search results...
Cannot publish article without friendly url
Issue In our Liferay 7.4 instance, editors encounter an error when attempting to publish an article without a Friendly URL, which differs from the behavior in Liferay 7.1. Environment Liferay DXP 7.4 Resolution The...
Adding an Intermediate Certificate in Liferay PaaS
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Sometimes, it is necessary to include an intermediate...
Integration with Vlibras Script
Issue When attempting to include the Vlibras script into the page, certain errors arise, causing the script to malfunction or causing buttons and links to stop working properly, for example.  Environment Liferay...
OpenID Connect cannot be enabled on Liferay SaaS setup
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Failing to enable OIDC implementation on an instance...
Does CVE-2022-47966 affect Liferay?
Issue Our security scan has shown CVE-2022-47966 as an active critical vulnerability. Is Liferay affected? Environment DXP 7.2 Resolution The out-of-the-box Liferay product is not affected by this vulnerability. So,...
LCP CLI support for AArch64/ARM64
Issue LCP CLI fails to install on environments using AArch64/ARM64 architecture Environment AArch64/ARM64 environments Liferay Cloud command line tool Resolution LCP CLI as of version 3 is not compatible with...
404 error for fragments images after updating site friendlyUrl
Issue When we change the site friendly URL, fragment images stop working and 404 errors were found in the browser console. Steps to Reproduce:  Set up Liferay DXP 7.4 Update 74. Navigate to Site Builder > Pages >...
Audit_AuditEvent and UserNotificationEvent tables in the database
Issue I would like to understand the purpose of eventType column in Audit_AuditEvent and deliveryType in UserNotificationEvent tables. In deliveryType column what is the meaning of the values e.g. 10000,10002 etc. ?...
Increase in file size in webp format
Issue When rendering the image for my user, I noticed that the webp file of the page has a considerably increased size Is there something that can be done so that it doesn't happen? Environment Liferay DXP 7.4...
Backup is failed with RangeError
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Backup is failed with RangeError ERROR [WARN] RangeError: The...
Size reduction of the document library/backup
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue From one day to another our backup size is reduced with...
Removal of mapping types
Issue You might encounter some deprecation warning in your Elasticsearch logs regarding the removal of mapping types: Using include_type_name in get mapping requests is deprecated. The parameter will be removed in...
Bootstrap Accordion does not work correctly
Issue When I click on the expand button, the expanded area is not displayed, so I am not able to change the text (without editing the text in the source code). Environment Liferay DXP 7.3+ Resolution System settings...
Content display date not showing user timezone
Issue The user's time zone setting is not reflected in the display date of mapped content in the fragment. Environment Liferay DXP 7.4 Resolution This functionality does not exist yet in the Liferay Portal. There...
frontend-css-web module was removed in DXP 7.4
Issue If I use frontend-js-override module, is there any impact on front-end-js-web module due to removal of frontend-css-web ? Environment Liferay DXP 7.4 Resolution frontend-web-css was removed in Liferay 7.4 here:...
Assets created from an Asset Publisher don't keep the categories and/or tags of the filter
Issue An Asset Publisher (AP) can be configured to filter by certain categories and/or tags. When the Display Settings of the AP has Show Add Content Button enabled, it's possible to create new assets directly from...