Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Content page displays wrong title when special characters are used on it
Issue If the title of a Content page has special characters on it, the title will then be displayed with "&". This usually happens when you place the character "&". For example: "Documents & Media", in...
Does CVE-2016-1000027 affect Liferay?
Issue Security scan shows CVE-2016-1000027 as an active vulnerability, is Liferay affected? Environment DXP 7.4 Resolution CVE-2016-1000027 is known to us, and we can confirm that Liferay should not be vulnerable, as...
Insecure HTTP methods
Issue HTTP methods like HEAD, OPTIONS, TRACE may provide information about the application that can be used in attacks like XST, CSRF, steal of sensitive information. How we can disable insecure/unnecessary http...
SEO - Titles in Google's search results page don't display expected text
Issue After configuring the "Title SEO" of a page, Google and other search engines don't display the value as-is. If we use a customization to remove the Site and Instance names, they keep showing in search results...
Cannot publish article without friendly url
Issue In our Liferay 7.4 instance, editors encounter an error when attempting to publish an article without a Friendly URL, which differs from the behavior in Liferay 7.1. Environment Liferay DXP 7.4 Resolution The...
Adding an Intermediate Certificate in Liferay PaaS
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Sometimes, it is necessary to include an intermediate...
Integration with Vlibras Script
Issue When attempting to include the Vlibras script into the page, certain errors arise, causing the script to malfunction or causing buttons and links to stop working properly, for example.  Environment Liferay...
OpenID Connect cannot be enabled on Liferay SaaS setup
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Failing to enable OIDC implementation on an instance...