Search Results

Issue Persistent XSS vulnerability found in the Web Page builder. Environment DXP 7.4 Resolution This is expected behavior, the HTML fragment does not provide any out-of-the-box sanitation, as it is expected that clients will allow only advanced roles to use it, and clients can restrict...

Issue We store several things in our OpenID access token and when a user tries to log in, it fails because the token size exceeds the 3000-character limit specified in the ACCESSTOKEN column of the OPENIDCONNECTSESSION table Environment Liferay DXP 7.2+ Oracle database Resolution The...

Issue We turned on AntiSamy but it removes certain HTML code and CSS styles from our Web Content articles. Environment DXP 7.0+ Resolution Usage of HTML and CSS in Web Content article HTML fields Web content articles are not really intended to be used like this - they should not replace...

Issue We configured AntiSamy to santize Web Content articles. We would like to understand how AntiSamy works and what parts are expected to be removed in Web Content articles. Environment DXP 7.0+ Resolution In the article How to configure validation directives in AntiSamy, you can find...

Issue Is there a way to map the LAR file to an XML format with roles for content and documents & media?  Environment DXP 7.3 Resolution Unfortunately is not possible adding roles to various content within an existing LAR by editing the XML file within. Manually editing a LAR file in...

Learn more: Search Result Limit with Elasticsearch: Mitigating "Result window is too large." errors with index.max_result_window Issue Is there any way to limit the total count of the number of records or pages in the pagination to be shown on the search results or to obtain large...

Issue Our team is the design phase for authentication and we want to know if Liferay supports IDP and SP initiated SAML logins at the same time?  Environment DXP 7.4 Resolution No, a single instance should not be both an IDP and a SP. With Liferay, you are either an IDP or an SP. For...

Issue Over the weekend we had a number of remote publishing jobs assigned a 'New' status. These were scheduled jobs that never ran. We were also unable to relaunch these jobs until we performed a restart. We are only familiar with the statuses of 'Successful' or 'Failed'. Can you please...