Search Results

Issue Can the derivatives unsafe-eval and unsafe-inline be exploited? If yes, how it is done? What is the residual risk associated with this? Can Content Security Policy (CSP) be resolved by adding a reverse Proxy? Environment Liferay DXP [all versions] Resolution Unfortunately, the DXP...

Issue Guest users should not be able to see the extend_session message in the browser once the session has expired. Environment Liferay DXP [7.1-7.4, Quarterly Releases] Resolution Post observing the time frequencies in the snapshot, it is seen that every request has around the interval...

Issue Once the user assigns the task to another user, then the previous user loses access to that task and is unable to see that in the 'Assigned to my roles' tab of 'My workflow Tasks'. Steps to reproduce: 1. Create one regular role. 2. Create three users and assign that particular...

Issue While playing the audio in Safari Browser, it shows an error, however, the same audio is working fine in other browsers. Here is the below code for adding the audio on the portlet with <audio> tag: <audio width="300" height="32" controls="controls"><source src="filename.ogg"...

Issue Upgraded the Liferay from DXP 7.4 update 31 to the latest release (DXP 2024.Q2 is the latest one at the time of writing this article), the blueprint is not visible on the pages, which was configured in the previous update. Steps to reproduce: Start DXP 7.4 update 31 Navigate to...

Issue User creates an embedded page, so the URL under the Layout section will be present in which database table and column. Steps to follow: 1. Start the server. 2. Navigate to the Site Menu > Pages. 3. Create a new 'Embedded' page and publish it. 4. Now, click on the three-dots of the...

Issue Is Github Copilot supported with Liferay IDE? Environment Liferay IDE / Liferay Developer Studio Resolution Liferay does not recommend or allow AI-generated code to land in their codebase. However, if someone likes to use Copilot or any other tool to generate the code that runs on...

Issue The users having certain site roles are unable to see the workflow tasks in the 'Assigned to my roles' tab  Steps to reproduce: Start Liferay Bundle DXP 7.4 update 92 Create Sites: Create a new site (e.g., Parent). Create a child site (e.g., Child) under the newly created Parent...

Issue Security vulnerability CVE-2013-3587 details a breach attack that is possible with the enable of HTTP compression and Deflate. Steps to see the behvaior: Navigate to any of the pages on the Liferay server. Inspect the browser, open the network tab request, and check the...

Issue When editing the "Language" selection for a User the "Prefix" does not always save the pre-selected response. Example: Set the "Prefix" to "Mr" and "Language" to "English" for a User and click Save. Change the "Language": "English" to another language where "Mr" is not the same...

Issue We are moving from Liferay 7.3 to Quarterly releases and we would like to upgrade our theme, but facing errors e.g. "No mixin named media-query." or "Undefined variable: '$nav-underline-font-size'." Environment Liferay Quarterly Releases Liferay Theme Generator Resolution Make sure...

Issue Can users give permission to the guest users to use the headless API to create, update, delete, etc. for documents & media, besides just the VIEW permission? Environment Liferay DXP 7.4 Resolution These actions are disabled by default on purpose for guest users: <guest-unsupported>...

Issue We've been made aware of a vulnerability: NVD - CVE-2022-1471 NVD - CVE-2017-18640 NVD - CVE-2022-25857 Environment Liferay Workspace (gradle v10.1.3) Resolution Jackson Dataformat YAML Dependency: The Liferay Workspace uses jackson-dataformat-yaml for parsing YAML files. While...

Issue Service Builder changes does not apply updates on database after add or delete a column in service.xml Environment Quarterly Releases Resolution Liferay has the property schema.module.build.auto.upgrade set to false by default. Unless you set this property to true in your...

Issue Translating static text with the help of fragments and language overrides Environment Liferay DXP 7.4 [all updates] Liferay DXP 2023.Q1 Liferay DXP 2024.Q1 Resolution Step 1: a) Navigate to Applications Menu -> Control Panel -> and click Instance Setting (under the Configuration...

Issue A user is not able to see the control panel, even though they are in a user group which correctly has assigned the application permissions and resource permissions relating to control panel access Environment 2024.Q1 Resolution This is resolved in 2024.Q2.0+, via the fix for...

Issue When assigning permissions to Documents or Web Content assets, after selecting permissions for users on the first page, navigating to the second page, and saving, only the permissions selected on the second page are being saved. I would expect the values selected in the first page...

Issue I've observed a difference in behavior when assigning a User to a child organization. DXP 7.2: the user would only be assigned to the child organization and not the parent organization. Quarterly Release: the user would be assigned to the child organization and automatically be...

Issue When I access https://www.myapp.com/mysite without logging in, it shows 404. When I add  the page name to the URL e.g. https://www.myapp.com/mysite/sitepage, then it redirects to login screen. The login prompt is enabled at System settings -> Security -> Login. Environment Liferay...

Issue The default selection of "Site Member" is preventing the inheritance of guest permissions. This default behavior occurs because a private page exists in the site, influencing the default permission settings. Environment Quarterly Releases Resolution To have the "Guest" option...