Residual risk after limiting the usage of unsafe-eval and unsafe-inline

legacy

Issue Can the derivatives unsafe-eval and unsafe-inline be exploited? If yes, how it is done? What is the residual risk associated with this? Can Content Security Policy (CSP) be resolved by adding a reverse Proxy? Environment Liferay DXP [all versions] Resolution Unfortunately, the DXP...

Remove extend_session for Guest users

legacy

Issue Guest users should not be able to see the extend_session message in the browser once the session has expired. Environment Liferay DXP [7.1-7.4, Quarterly Releases] Resolution Post observing the time frequencies in the snapshot, it is seen that every request has around the interval...

Unable to play audio of OGG format in Safari Browser

legacy Troubleshooting

Issue While playing the audio in Safari Browser, it shows an error, however, the same audio is working fine in other browsers. Here is the below code for adding the audio on the portlet with <audio> tag: <audio width="300" height="32" controls="controls"><source src="filename.ogg"...

The Blueprints are not visible on the pages after upgrade process

legacy Troubleshooting

Issue Upgraded the Liferay from DXP 7.4 update 31 to the latest release (DXP 2024.Q2 is the latest one at the time of writing this article), the blueprint is not visible on the pages, which was configured in the previous update. Steps to reproduce: Start DXP 7.4 update 31 Navigate to...

Which database table should stores the URL of the embedded page

legacy

Issue User creates an embedded page, so the URL under the Layout section will be present in which database table and column. Steps to follow: 1. Start the server. 2. Navigate to the Site Menu > Pages. 3. Create a new 'Embedded' page and publish it. 4. Now, click on the three-dots of the...

Workflow task is not assigned to site role users

legacy Troubleshooting

Issue The users having certain site roles are unable to see the workflow tasks in the 'Assigned to my roles' tab Steps to reproduce: Start Liferay Bundle DXP 7.4 update 92 Create Sites: Create a new site (e.g., Parent). Create a child site (e.g., Child) under the newly created Parent...

CVE-2013-3587- enable of HTTP compression

legacy Troubleshooting

Issue Security vulnerability CVE-2013-3587 details a breach attack that is possible with the enable of HTTP compression and Deflate. Steps to see the behvaior: Navigate to any of the pages on the Liferay server. Inspect the browser, open the network tab request, and check the...

"Prefix" does not save when switching between "Languages" for a User

legacy Troubleshooting

Issue When editing the "Language" selection for a User the "Prefix" does not always save the pre-selected response. Example: Set the "Prefix" to "Mr" and "Language" to "English" for a User and click Save. Change the "Language": "English" to another language where "Mr" is not the same...

Theme upgrade issues

legacy Troubleshooting

Issue We are moving from Liferay 7.3 to Quarterly releases and we would like to upgrade our theme, but facing errors e.g. "No mixin named media-query." or "Undefined variable: '$nav-underline-font-size'." Environment Liferay Quarterly Releases Liferay Theme Generator Resolution Make sure...

Provide other permissions to Guest user beside just view permission

legacy

Issue Can users give permission to the guest users to use the headless API to create, update, delete, etc. for documents & media, besides just the VIEW permission? Environment Liferay DXP 7.4 Resolution These actions are disabled by default on purpose for guest users: <guest-unsupported>...

Translating static texts with Fragments

legacy How To

Issue Translating static text with the help of fragments and language overrides Environment Liferay DXP 7.4 [all updates] Liferay DXP 2023.Q1 Liferay DXP 2024.Q1 Resolution Step 1: a) Navigate to Applications Menu -> Control Panel -> and click Instance Setting (under the Configuration...

Known Issue [Resolved]: Control Panel access not correctly being provided through role assigned to user group

legacy Troubleshooting

Issue A user is not able to see the control panel, even though they are in a user group which correctly has assigned the application permissions and resource permissions relating to control panel access Environment 2024.Q1 Resolution This is resolved in 2024.Q2.0+, via the fix for...

Permissions assignments only save the most recently viewed page's selections

legacy How To

Issue When assigning permissions to Documents or Web Content assets, after selecting permissions for users on the first page, navigating to the second page, and saving, only the permissions selected on the second page are being saved. I would expect the values selected in the first page...

When adding a User to a child organization, it automatically assigns them to the parent organization

legacy How To

Issue I've observed a difference in behavior when assigning a User to a child organization. DXP 7.2: the user would only be assigned to the child organization and not the parent organization. Quarterly Release: the user would be assigned to the child organization and automatically be...

Guest user is not redirected to the login page when accessing the portal with site URL

legacy Troubleshooting

Issue When I access https://www.myapp.com/mysite without logging in, it shows 404. When I add the page name to the URL e.g. https://www.myapp.com/mysite/sitepage, then it redirects to login screen. The login prompt is enabled at System settings -> Security -> Login. Environment Liferay...

Facing issues in setting 'liferay.workspace.product' property for Liferay Workspace

legacy Troubleshooting

Issue Upgrading the portal from Liferay DXP 7.4 Update 67 to Liferay DXP Quarterly Release 2024.Q1.9 and trying to set 'liferay.workspace.product = dxp-2024.q1.9' in the gradle.properties however, it is not working. Environment Liferay DXP 2024.Q1.9 Resolution Try setting 'dxp-7.4-u112'...

Unable to see the list of assignees for Site Roles, Organization Roles, Asset Library Roles and Account Roles

legacy How To

Issue I would like to access a list of Roles and Assignees for "Site Roles", "Organization Roles", "Asset Library Roles", and "Account Roles" without having to go through each individual account to get information.This function is available for "Regular Roles" but unavailable for other...

Document status is not getting updated in search indexes

legacy Troubleshooting

Issue Unable to update the document status in the search indexes. Steps to reproduce: 1. Start the server. 2. Deploy the JAR file. 3. Navigate to the Control Panel > Custom Fields. 4. Add 2 custom fields, "Expiration Date" and "Display Date" of type Date. 5. Configure the scheduler in...

Polyfill.io Vulnerability: Is Liferay affected?

legacy

Issue An attribute polyfill:true is observed in the source code of the website. Does it have anything to do with the domain 'https://polyfill.io'? Is Liferay affected by the Polyfill.js vulnerability? Environment All environments [DXP 7.0 - DXP 7.4] Resolution Polyfill is a common...

The Impersonation Attempt Fails Without Errors in the Logs or UI

legacy Troubleshooting

Issue Admin users are unable to impersonate other users. When attempting to impersonate, a new tab opens, but it remains on the original user. Impersonation attempts fail, the `doAsUserId?` is missing from the URL. Environment Liferay DXP 7.4 + Resolution Start the bundle and navigate...

How to define user and email notifications for each asset

legacy How To

Issue I want to disable email notifications for blogs How to configure notifications for each asset to receive them by email or as user notifications. Environment DXP 7.4 Resolution It is possible to choose the notification method for each asset of the portal from the user profile menu...

How do you create a role that allows a user to edit details of other users?

legacy How To

Note, this is just one method and can be tailored to different preferences. Issue How do you create a role that can edit the details of other users? Like email address, etc. How do you create and assign a specific role? Environment Liferay DXP 7.3 Resolution Creating Users and Roles...

Longer Team Names Fail to Word Wrap and Overlap the Description

legacy Troubleshooting

Issue When creating a long team name, the name overlaps the description of the team. Steps to reproduce: Start a vanilla 2024.q1 bundle Navigate to Menu > People > Teams > + Create a long team name using underscores instead of spaces Include a description with or without spaces...

Workflow Tasks Are Missing History

legacy

Issue After approving a document, I'm not able to see if it was previously approved or rejected. In previous versions of Liferay DXP, users could see the entire history of a task assigned to them in the workflow. When a web content or document goes through the workflow process, there is...

After Upgrading to DXP 7.4+, there's an extra field within our structures

legacy How To

Issue After upgrading from DXP 7.3, we've observed that our structures have been modified and there is an extra "Fields Group" added to it. Environment DXP 7.4+ Quarterly Release Resolution This is the expected behavior. The underlying technology between DXP 7.3 and DXP 7.4+ has...

Service Provider (SP) initiated SLO when using OIDC (SaaS environment)

legacy Troubleshooting

Issue We are utilizing OpenID Connect (AWS Cognito) for logging into Liferay; however, the users remain logged into the SSO system even after logging out of Liferay. Environment Liferay DXP 7.4 Resolution Currently Liferay's OpenID Connect (OIDC) implementation does not include SLO...

.innerHTML is getting removed in web content (SaaS environment)

legacy

Issue When we try to add some extra lines of code (output.innerHTML="";) in the web content, it is not working as expected and the innerHTML is getting removed. We are taken to the first line of the code resulting in not being able to edit the code related to innerHTML. Environment...

Data is lost when Web Contents are published with the Corsican language.

legacy Troubleshooting

Issue When publishing content in the Corsican language, data that had been published in other languages was lost. Environment All environments Resolution Please request a hotfix with LPD-27959 to resolve the issue. Additional Information Updating the Patching Tool ,...

Cannot add more than one notification for a task in workflow

legacy Troubleshooting

Issue When creating a workflow, adding more than one notification freezes the source view. Unable to edit the source view when adding notifications based on Role or Role Type. Steps to reproduce: Navigate to applications > workflow > process builder and create a new workflow Upload the...

Default Language code is not appending in URL

legacy How To

Issue The default language code is not appended in every URL of the portal. Environment Liferay DXP 7.4 [all updates] Resolution To enable the default language in every URL, the following property needs to be enabled: Control panel -> Instance settings -> Localization -> Locale Prepend...

All Custom Fields are not viewable in the Control Panel

legacy Troubleshooting

Issue When adding more than 25 attributes, only 20 are viewable. Steps to reproduce: Control Panel > Configuration > Custom Fields > User Add more than 25 attributes by clicking on "New" Observe that only 20 attributes are visible and there is no pagination available to view the second...

Known Issue [Resolved]: Products with a UOM configured and discounts updated via API unexpectedly display per-base-unit net price

legacy Troubleshooting

Issue After applying a discount to a product (with a UOM configured) via the POST v1.0/skus/by-externalReferenceCode/{externalReferenceCode}/sku-unit-of-measures headless-commerce-admin-catalog API, the discounted price for the product in the UI shows a per-base-unit Net Price instead of...

Unable to configure Liferay to use Okta groups for authorization due to missing Feature Flag

legacy Troubleshooting

Issue While trying to configure Liferay to use Okta groups for authorization when following the instructions here, Importing User Groups’ Memberships from an External IDP through SAML, there’s a mention of a Feature Flag, however it is not possible to know which one it is. Environment...

Image preview not displaying for AVIF format

legacy Troubleshooting

Issue Images in AVIF format cannot be previewed in Documents and Media Steps to reproduce 1. Startup Liferay 2. Setup and enable ImageMagick (with HEIC support) 3. Navigate to System Settings > Adaptive Media >> Images 4. Add an entry for Supported Mime Type: image/avif 5. Click Save 6....

Multiple

tags on the Home page editor
legacy Troubleshooting

Issue Users want to improve SEO performance by ensuring that each page contains only one H1 tag. However, they noticed that '<h1 class="hide-accessible">Navigation</h1>' appears on all pages, thus this has to be a <span> class to rectify this. Environment Liferay DXP 7.3 Resolution The...

Canonical urls for commerce products

legacy How To

Issue Canonical URLs work correctly for pages in different locales, however, users want the same for their products so that the correct canonical tag is displayed for their product based on the page locale. Environment Liferay DXP [all updates] Quarterly Release Resolution Follow the...

Unable to access product specifications via guest user

legacy Troubleshooting

Issue Users need to access product details via a headless admin API but through guest users (unauthenticated requests). However, users could use 'Service Access Policies' for this; though, even after adding the relevant classes in SAP, a view permissions error occurs. Steps to reproduce:...

lastPublishDate showing as NULL

legacy

Issue 'lastPublishDate' column is showing as NULL in 'DLFileEntry' table. According to the use case, users need to show the last publish date of the document. Environment Liferay DXP 7.3 Liferay DXP 7.4 Resolution 'lastPublishDate' value will only be shown when a document is published to...

Is Liferay vulnerable to CVE-2023-50164?

legacy

Issue After running a scan, we received an alert about a possible vulnerability in Liferay. We want to confirm if we are vulnerable to CVE-2023-50164. Environment All environments. Resolution Liferay is not vulnerable as it does not use the Struts upload feature. Additional Information...

Unable to filter by relationship using Postgres in neasted levels

legacy Troubleshooting

Issue When filtering data based on relationships with nested levels using PostgreSQL, we encountered an internal server error with the following log entry instead of a status 200: 2024-04-18 13:43:33.147 ERROR [http-nio-8080-exec-9][SqlExceptionHelper:142] ERROR: operator does not exist:...

Gradle tasks not working for new versions

legacy Troubleshooting

Issue We are trying to update our workspace, to do so we have performed the following actions based on a blade init: Update gradle-wrapper version to 7.3.3 Set in settings.gradle file for "com.liferay.gradle.plugins.workspace" version 10.0.3 In gradle.properties we set...

Hardcoded link resulting in 404 error

legacy Troubleshooting

Issue I have a hardcoded button to a web content that is now going to a 404 page. My link to Liferay content is now breaking. Environment DXP 7.4 Quarterly Release Resolution Hardcoding links to Liferay content can break if any changes are made to the URL and are not considered best...

Parent organization membership is also displayed

legacy Troubleshooting

Issue We found a bug with how organization membership is displayed on the user account page: when a suborganization is assigned to a user, the parent organization of the assigned suborganization is also displayed. We only wish to see the suborganization and not the parent organization....

Uncaught TypeError in the DXP Homepage (PageTree)

legacy Troubleshooting

Issue If a role does not have admin access, but can access the Site Menu, PageTree toggle console errors. Certain roles that have access to edit web content see an error in the browser console log. TypeError happens when accessing a widget page template Uncaught TypeError: Cannot read...

The "assign to me" tab under My Workflow Tasks is not displaying the order by latest documents at the top of the grid

legacy Troubleshooting

Issue The assign to me tab is not displaying the order by latest documents at the top of the grid. In 7.4 the latest document is displaying in the bottom of the grid. Environment 2023.Q4 Resolution You can use the ordering button to revert the order of the displayed elements, as per...

Deprecation of Liferay Sync

legacy

Issue I'd like to inquire about the support for Liferay 7.4 in the Liferay Sync. Currently, the Compatibility Matrix only lists support for Liferay DXP 7.3. Environment Liferay DXP 7.4+ Resolution Liferay Sync got deprecated in 7.3 without direct replacement. The feature is in archived...

Mutiple search containers is not working properly

legacy Troubleshooting

Issue If users have multiple search containers in the same widget, first search container is showing results in the second container and vice versa. Expected results would be in the below 'view.jsp' is 'test1' comes under search container 1 and 'test' comes under search container 2, and...

Creating a User Account Without an Email Address

legacy How To

Issue How can I create a user without requiring the user to have an email address? Environment Liferay Quarterly Releases Resolution You can create a user without requiring an email address by setting the following properties in the portal-ext.properties file....

Update object entries from workflow task screen

legacy

Issue Allow users to access the object in edit mode from the workflow task screen Environment Liferay DXP 7.4 Resolution As of now (at the time of creating this article), there is no OOB (out-of-the-box) way available to update object entries from the workflow task screen. As a result, a...

Objects - multiple items can be saved but only one item is displayed in the administration view

legacy

Issue When I try to create an object with an upload field, and save a new item multiple times, the object is only displayed once in the administration view. The uploaded item is not cleared from the field either. Is this the expected behavior? Environment Liferay DXP Quarterly Release...

Users are not allowed to create organizations at a higher level than where they currently are

legacy

Issue Can we enable users to create organizations that are at a higher level in the hierarchy than their own membership? Example: Parent > Organization > Child Organization > Child Organization 2.0 Can a user belonging to the "Child Organization" create organizations like...

Unable to select Specific Display Page Template for the default 'Home' page from the page hierarchy

legacy Troubleshooting

Issue While creating web content and while selecting the Specific Display Page Template, the ‘Home' page does not get enabled and hence the child page associated with the 'Home’ page cannot be selected. However, the child page can be selected when it is searched using the search bar....

Redirecting to login page when authenticated via SAML returns a 500 error

legacy Troubleshooting

Issue Navigating to to the login page /c/portal/login on the SP throws a 500 error when already logged in through SAML. Environment DXP 7.3 DXP 7.4 Resolution This is a known issue affecting DXP 7.4 U80 and lower and some DXP 7.3 versions. Please upgrade to a more recent release or open...

After copying the data to the Message Board, the numbered list not continuing

legacy Troubleshooting

Issue Copied the data from the Word file, pasted it into the Message Boards's Thread, and published it. After publishing the Thread, the number list is not continued and shows like: 1. a. 1. a. 1 a. Steps to reproduce: Navigate to the Content & Data > Message Boards > click on the action...

Enable/Disable Multi-Factor Authentication

legacy How To

Issue If there is any problem related with the way two-factor is working or do you simply want to deactivate it for some reason. Environment Liferay DXP 7.4 2023 Q1 - 2023 Q4 2024 Q1 Resolution There are two ways to enable or disable the multi-factor authentication: Through the portal,...

The users imported from LDAP cannot change their password

legacy Troubleshooting

Issue The users who were imported from LDAP cannot modify their passwords from My Account. Environment All Liferay DXP environments Resolution Make sure that LDAP Export option is enabled. Ensure that the credentials used to connect from Liferay DXP to LDAP have sufficient permissions to...

A user group imported from LDAP is not removed from Liferay when the related group is removed from LDAP

legacy

Issue Removing a group from LDAP does not remove the related user group imported in Liferay DXP's database. Environment All Liferay DXP environments Resolution This is the intended behavior. The user group has to be removed manually. , knowledgeArticleType: reference, legacy: true,...

How to properly scale up Search nodes?

legacy How To

Issue How to properly scale up Search nodes instead of deleting the Search service and deploying it again? Environment Liferay PaaS Liferay DXP 7.4+ Resolution Following the Liferay Cloud Upgrading to a High Availability Subscription documentation, which also describes the procedures to...

Deactivating Autogenerate Structure Key generates IDs

legacy

Issue I browse to Control Panel -> System Settings -> CONTENT AND DATA -> Web Content -> SYSTEM SCOPE -> Administration and uncheck 'Autogenerate Structure Key' option. Then I create a new Web Content Structure and I fill the 'Structure Key' field with a custom value (i.e. 'ID0001')....

Tabs created in Webcontent body field are not clickable in content management system

legacy

Issue Created tabs are not clickable in 2023.q4.0 editor where as the same tabs were working correctly in Liferay 7.2 editor. Environment 2023.q4.0 Resolution In DXP 7.2, the editor utilized was AlloyEditor. However, DXP 7.4 has transitioned to CKEditor, resulting in the observed...

Search Results

tags on the Home page editor legacy Troubleshooting

tags on the Home page editor
legacy Troubleshooting