Search Results

This whitepaper describes the data protection policies of Liferay DXP and describes Liferay's approach to protect personal data in compliance with local regulatory requirements such as GDPR. The paper is available for download here., content:...

This document provides an overview of application-level security features in Liferay DXP. It discusses transport security, encryption, web services, SSO, OAuth, and more.  The paper is available for download here., content:...

This paper provides an overview of the processes used during development and testing of Liferay products. Combined, these processes ensure that Liferay’s customers can have confidence in the security and ongoing reliability of Liferay products, including Liferay DXP. The paper is...

The Liferay Engineering and Global Services teams have extensive experience deploying and managing infrastructure in cloud environments such as Azure. Their accumulated experience and best practices are described in this reference guide for Liferay Digital Experience Platform (DXP). This...

The Liferay Engineering and Global Services teams have performed intensive performance and scalability testing on Liferay Digital Experience Platform (DXP) 7.1 and the accumulated knowledge has been condensed into this checklist. The paper is available for download here.  , content:...

Liferay Digital Experience Platform (DXP) 7.1 is software to create and manage digital experiences across web, mobile and connected devices. This whitepaper discusses the key benefits, feature highlights, deployment capability, and key components.  The paper is available for download...

Liferay has redesigned its platform with new functionality in Liferay Digital Experience Platform (DXP). The following is a summary of the key new features in Liferay DXP. The paper is available for download here., content:...

Please be aware that the page you are viewing has been machine translated from Japanese into English and may contain some translation errors. If you observe any issues with the translation, please contact us. Issue Check patch information, for example,service pack version is "Not...

Issue When designing a custom landing page that displays a 404 Error code, invalid URLs that have /image/ in the URL string should display the customized page placed either in the /webapps/ROOT/html/portal folder or a site page. Environment Liferay DXP 7.0, 7.1 Resolution This is...

Issue After setting company.security.login.form.autocomplete=false to disable autocomplete for user login information, the browser still permits users to save passwords or use password managers to manage password autocomplete or autofill. Resolution This is due to a lack of consensus...

Please be aware that the page you are viewing has been machine translated from Japanese into English and may contain some translation errors. If you observe any issues with the translation, please contact us. Issue How to check for updates to pages that have propagation enabled from the...

Issue When a user authenticates against an SSO they are redirected to the server they were logging into. As part of this both the SSO address and the server address appear in the URL for a brief time. This occurs despite there being a web server/load balancer/proxy in front of the...

Issue LFR_SESSION_STATE cookies are not marked as HttpOnly Environment Liferay DXP, Liferay 6.2 Resolution This is not a security issue because this cookie is created and used in session.js which is the portal's Javascript.  _cookieKey: 'LFR_SESSION_STATE_' + themeDisplay.getUserId()...

Issue Do items in documents and media or web content folders inherit permissions from the folder in Liferay? Environment Liferay DXP 7.0 Liferay DXP 7.1 Liferay Portal Resolution In Liferay, documents and web content articles do not inherit permissions from their parent folder. However,...

Issue In the Liferay theme dependencies, Lodash versions 3.10.1 and below are used extensively as dependencies throughout. Versions of Lodash prior to 4.17.5 suffer from a security risk: CVE-2018-3721 Environment Liferay DXP 7.0 Liferay DXP 7.1 Liferay Theme Generator Resolution Impact...

Issue In the default Liferay portal, we have a property called dl.file.extensions= or (OSGi configuration properties in 7.1) that allows administrators to restrict the types of files that may be uploaded. However, this configuration does not apply to the separate Knowledge Base portlet,...

Issue General Data Protection Regulation (GDPR) went into effect on May 25, 2018 Environment Liferay 6.2 Liferay DXP 7.0 Liferay DXP 7.1 Liferay DXP 7.2 Resolution It’s ultimately your responsibility to assess your own organization’s usage of personal data and the work required to comply...

This article sets forth the permissions rules for managing Message Boards Categories and Threads. One question is whether the system is granular enough to allow users to delete only category threads for which category the role is assigned, and not other category threads. Resolution...

Published: March 05, 2019 The Patching Tool 2.0.11 is a maintenance release for Liferay Digital Experience Platform 7.0 and 7.1 which includes fixes and minor updates. Release Highlights:  Fixes the issue preventing the collision listing using the diff command Additional Information For...

What are the different types of activation keys? How do I obtain an .xml activation key for my Liferay DXP instance? What information do I need to provide to request an activation key? What is my Instance Sizing value? When do I need to request a new activation key? Are there any...