Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-109009

When portlet.url.anchor.enabled=true, the anchor is added to p_auth parameter in URL

    Details

      Description

      Reproduction steps

      1. Set property "portlet.url.anchor.enable=true" in portal-ext.properties
      2. Start the portal
      3. Place a Message Boards portlet to a page
      4. Create a new thread
      5. Fill the form and try to publish it

      Expected behavior
      The new thread is created

      Actual behavior
      The threadis not created, the below error message appears in the log

      Error log

      User 20127 is not allowed to access URL http://localhost:8080/web/guest/home and portlet com_liferay_message_boards_web_portlet_MBPortlet: User 20127 did not provide a valid CSRF token for com.liferay.portlet.SecurityPortletContainerWrapper
      

        Attachments

          Activity

            People

            • Assignee:
              harry.chai Harry Chai
              Reporter:
              robert.gusztus Róbert Gusztus
              Participants of an Issue:
              Recent user:
              Jason Pince
              Engineering Assignee:
              Róbert Gusztus
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                10 weeks, 4 days ago

                Packages

                Version Package
                7.2.10 DXP FP5
                7.2.10.2 DXP SP2
                7.2.X
                7.3.1 CE GA2
                7.3.2 CE GA3
                Master