Liferay portal cache filter must not cache response with other then 200(SC_OK) status

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 5.1.2, 5.2.3
• Fix Version/s: None
• Component/s: None
• Labels: None
• Environment: r38404
• Branch Version/s:
  5.1.x, 5.2.x
• Backported to Branch:
  Committed
• Similar Issues: Show 4 results ; ;

  LPS-5247	Cache/ETag filter order
  LPS-15802	Liferay Portal Security Vulnerability: HTTP Response Headers include Expires (caching) AND Set-Cookie (non-authenticated user can get access to authenticated session FROM CACHE)
  LPS-2781	barebone.jsp and everything.jsp are not cached by the browser
  LPS-2286	Caches of web content articles are not hit

The Liferay cache filter may store response data if the status is other then 200 (SC_OK), and serves responses only with SC_OK status, it can lead to incorrect responses.

[Attila Fazekas]

Patch