Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-154557

Make TunnelServlet configurable to not hide exception data from clients

    Details

    • Type: Story
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Labels:

      Description

      Description:
      When LPS-119049 hid the exception data from the calling side, it created many issues (particularly in remote staging) where this information is needed to display a proper user-friendly error message. E.g.: LPS-126729 , LPS-142320 . Some of them could be resolved by handling the errors differently, but some information is still lost.

      Suggestion:
      Create a configurable property, that portal administrators can set to re-enable this functionality, if they are willing to take this security risk.

        Attachments

          Activity

            People

            Assignee:
            vendel.toreki Vendel Töreki
            Reporter:
            vendel.toreki Vendel Töreki
            Recent user:
            Enterprise Release HU
            Participants of an Issue:
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:

                Packages

                Version Package