Note: please note that Liferay has renamed its Liferay Experience
Could offerings to Liferay SaaS (formerly LXC) and
Liferay PaaS (formerly LXC-SM).
Issue
- Virtual Host defaults were changed from a wildcard value to secure default values.
Previous Value:virtual.hosts.valid.hosts=*
Updated Value:
virtual.hosts.valid.hosts=localhost,127.0.0.1,[::1],[0:0:0:0:0:0:0:1]
Environment
- Liferay DXP 2023.Q3+
- Liferay DXP 7.4 Update 86+
- Liferay DXP 7.3 Update 34+
- This affects all who use the wildcard value with the
virtual.hosts.valid.hostsportal property or do not have the property set in their portal-ext.properties file.
Resolution
Liferay DXP
- This is a breaking change documented here.
- Please include the proper virtual hosts and addresses within the portal property in order to secure the environment:
virtual.hosts.valid.hosts=
Liferay PaaS
- Ensure that you have deployed Liferay DXP image version 5.3.0+
liferaycloud/liferay-dxp:7.4-5.3.0
liferaycloud/liferay-dxp:7.3-5.3.0
Additional Information
- LPE-17758
- On Liferay PaaS, the new default property will prevent the readiness probe from succeeding. As a consequence, the liferay service deployment is going to time out unless you set
virtual.hosts.valid.hosts=*in portal-ext.properties.