Search Results

All Results 57
Sort By
Resource Type
Applicable Versions
Deployment Approach
Capability
Feature
Content Page image lost after changing site's default language
Issue After changing the default language on a site and checking content fragments that include images, the content on existing pages is not displayed anymore if we change the translation. Environment DXP 7.2 DXP 7.3...
Which is the most convenient tooling to create and build new themes?
Issue It is common among users being in doubt about which is the most suitable way to create and build new themes. Two main ways of doing this are available: Using Liferay Blade or Liferay Developer Studio, which...
Behavior change in searches for partial matches when using Elasticsearch 7
Issue The behavior for searches by a prefix on the content fields has changed. It continues working if you search by title fields. For example, if you have a content field with the "legal" word on it and you search the...
Can Multi-Factor Authentication (MFA) be set for specific roles only?
Issue We want to set up MFA for Administrators only. Is this possible with Liferay out-of-the-box? Can we target specific users to sign in using multi-factor authentication? Environment DXP 7.4 DXP 7.3 DXP 7.2  ...
URL length modification / restriction
Issue Sometimes we need to modify or restrict the length or URL Liferay generates ( for example for security custom solutions ) but Liferay has no out of the box solution for that. Environment DXP 7.2...
Internet Browsers Supported by Liferay Help Center
The Liferay Help Center has been tested with the browsers listed below. Older browsers can still be used, but newer features may not look or work as intended. We recommend that you always use the current version of a...
How to enable CSRF Token in Liferay?
Issue How to enable CSRF Token in order to prevent CSRF attacks in Liferay? Environment Liferay DXP 7.2 Resolution Liferay's p_auth token protects against CSRF and is enabled by default. Here is the main...
dtSa cookies containing special characters
Issue As dtsa cookies are detected, are these cookies URLs cause for concern? Is there any information concerning these cookies in relation to Liferay? Use Case: As Liferay generated dtSa cookies contain the...
How to configure the default timeout value to any value instead of having it capped at 500ms
Issue The default library timeout until Liferay DXP 7.2 fix pack dxp-3 is 250ms. The default library timeout since Liferay DXP 7.2 fix pack dxp-4 is 500ms.  Use Case: The user would like to be able to set/configure...
A new version file is created for each slight modifications
Issue Is it possible to change the attribute of a file version without creating a new one? Environment Liferay DXP 7.0 Resolution Document and Media Portlet is designed to create a new file version whenever a file...
Do we need gzip for images?
Issue When retrieving images from Liferay server, gzip is not enabled. Environment DXP 7.0+ Resolution As images are already compressed, using gzip on them won't provide any additional benefit, and can actually...
UserTrackerPath entries limitation in clustered environment
Issue Track user visited paths in a clustered environment. Environment Clustered environment with the following properties enabled to use Live Users and Session Tracker: live.users.enabled=true...
Adding a custom item into the journal article drop-down menu (web content drop-down menu)
Issue Within the drop-down menu for Web Content, is there a way to configure my own custom items?  The example for Document Library seen in this blog utilizes the DLDisplayContextFactory extension point. Is there...
How can the p_auth authorization token be generated?
Issue Liferay protects itself against CSRF attacks by generating the p_auth authorization token. How can this token be created? Environment DXP 7.0, 7.1, 7.2, 7.3 Resolution When "auth.token.check.enabled=true" is set in...
SessionTracker in clustered environment
Issue Session Tracker cannot be used to track visited paths among cluster nodes. Environment Clustered environment with two or more nodes. Resolution Session Tracker doesn't support tracking visited paths when...
Alerts appearing on every site, even when Distribution Scope set to a specific site
Issue When using the Alerts widget, even when the Distribution Scope for an Alert is set to a specific site, the Alert appears on every site that the user visits. Also, guest users visiting the site specified in the...
Cross Site Scripting Vulnerability report on refererPlid or other parameters
Issue During a penetration test, a Cross Site Scripting Vulnerability may be reported, indicating that you can inject a script into the refererPlid parameter or into the...
Accessing the phone camera on button click event in phone's web browser.
Issue How to access the phone camera on a button click event in the phone's web browser? Environment Liferay DXP 7.0 Liferay DXP 7.1 Liferay DXP 7.2 Resolution Liferay doesn't have any OOTB feature or configuration in...
Is it possible for Liferay to use Ruby Scripting to download a file from the Document Library?
Issue To establish a system that accepts images and allows for a review process. The images will finally be saved in a folder in the site's document library. The user wished to use a ruby script to get the images...
The HTML tags are added by the editor when editing content in the Content editor
Issue When editing content in the Content editor, the HTML tags are being added by the editor. Steps to Reproduce: 1. Login to Liferay 7.1 as Liferay Admin 2. Navigate to Control Panel -> Announcements and Alerts...
How to define the order in which multiple object actions (defined for the same trigger) will be executed?
Issue I was wondering is there a possibility to order/prioritize object actions that use the same trigger? For example, I have two object action, action1 and action2, and they are both triggered by On after add. I need to...
Is Liferay Vulnerable to CVE-2023-45960?
Issue I would like to know if Liferay is vulnerable to CVE-2023-45960?  Is Liferay affected by CVE-2023-45960? Environment Quarterly Release 2024.Q1.7 Resolution The NIST listing for CVE-2023-45960 has been withdrawn and...
Segments created in Analytics Cloud are scoped globally
Issue When Segments are created in the Analytics Cloud console under a certain property associated with a specific site, the segment shows up on all sites in the connected instance and are scoped globally. This is in...
Vulnerabilities for spring-web and spring-core
Issue Vulnerabilities remain unresolved in spring-web and spring-core, even after a fix was applied to spring-context. For spring-web: Vulnerable component: org.springframework:spring-web:5.3.39 For spring-core:...
How to have multiple Jenkins account in Liferay PaaS
Issue Is there any possibility of having multiple Jenkins accounts for the build process and deployment in the environment so that would be able to track who initiated the Jenkins build or who started the build?...
Beta Feature 'Walkthrough' Documentation Unknown
Issue There is a beta feature called 'Walkthrough' available to enable under Configuration > Site Settings > Walkthrough, but I cannot find any documentation for it.  Environment DXP 7.4 Quarterly Release Resolution...
An error should appear immediately after uploading a file of wrong extension within the size limit
Issue When trying to upload a file in blogs that is less than the specified limit with the wrong extension, it shows the progress bar for a while and then gives the error. Based on user experience, the error...
How to generate a valid Liferay SaaS/PaaS Custom SSL Certificate
Issue What are the specific requirements for a custom SSL certificate to be successfully deployed on Liferay SaaS/PaaS? Environment Liferay SaaS / PaaS Resolution Private key and certificate should be...
Is there a setting that prevents Web Content publishing if the review date is set to a past date?
Issue Providing a past date as the review date should trigger an error and block publishing Web Content Is there any configuration that would enable this? Environment Liferay DXP 7.0+ Resolution Currently this feature...
Unable to remove form records without permission to also remove form itself
Issue We're looking into giving a user the ability to remove their own form records; however we found that the owner of a forminstancerecord cannot remove the forminstancerecord unless they get the permission to remove the...
When moving a web content to another folder, the "Modified by XX" message does not display the user who moved it
Issue When moving a web content to another folder, the 'Modified by XX' message doesn't display the user who moved it, but it does record the modification time. Environment Liferay DXP 2024.Q3 Resolution The current...
Empty search lists all the message board threads
Issue We created a few message board threads in the portlet and if we run an empty string search, all threads are displayed in the search result. Environment Liferay DXP 7.0+ Resolution This is the...
Query regarding special character (~) in the URL
Issue There is a special character (~) observed in the URL when navigating to site settings. Is this special character "~" a part of the URL design pattern of the product or is this is a security concern?...
Keep-alive setting for VPN
Issue What is the default keep-alive setting for the Liferay Cloud VPN client? Environment Liferay PaaS/SaaS VPN client-to-site VPN. Resolution PaaS/SaaS VPN Client: Uses standard Strongswan keep-alive...
CKEditor Upgrade to version 5
Issue I would like to inquire about the status of CKEditor in Liferay, specifically, if there is a plan to upgrade CKEditor to version 5 in an upcoming release of Liferay? Environment Liferay DXP 7.3 Liferay DXP...
Is Session Prediction Possible in Liferay
Issue Is it possible an attacker could predict the JSESSIONID and gain unauthorized access, referencing an example from a 'Session Prediction' article? Explanation of Issue Using the "Catalog" Page in Postman: If a...
Java & Liferay - 2025 and Beyond
The next major evolution of Java is here and Liferay is poised and ready to embrace the next generation. Like with any software or technology change, adoption will require work and will take time. That's why...
JournalArticleAssetEntryClassTypeIdUpgradeProcess WARN traces during upgrade process
Issue After upgrading from 7.3 to 2024.Q3 we are getting lots of WARN traces related to com.liferay.journal.internal.upgrade.v5_1_1.JournalArticleAssetEntryClassTypeIdUpgradeProcess upgrade process: 2024-11-20...
Understanding the 'Viewable by' dropdown and Download permission for file uploads in DL
Issue How do the 'Viewable by' dropdown and Download permission work when uploading files to the Document Library? Environment 7.4 U76 - 2024.Q4 Resolution 'View' permission → 'View' and 'Download' permissions The...
Need to set the status code of error page to 404
Issue User is redirecting all the page-not-found request to a specific published public page, but the status code of the published public page is always 200 Environment Liferay DXP 7.0 Liferay DXP 7.1 Liferay DXP...