The user reminder query is not rendered

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.1.X EE, 7.0.0 M3
• Fix Version/s: 6.2.3 CE GA4, 6.2.X EE, 7.0.0 M1
• Component/s: Application Security, Application Security > Login/Sign in Portlet, Security Vulnerability
• Labels:
  • liferay-fixpack-portal-40-6210
• Environment: Tomcat 7.0.42 + MySQL 5.1.35 Portal master GIT ID: f376fa8ff60d09d94c4cb07eaaf1d8b32217a7c2.; Tomcat 7.0.40 + MySQL 5.1.35 Portal 6.1.x EE GIT ID: 9cd9066a638cb185b760ec1ae33098d14875dc29.
• Branch Version/s:
  6.2.x
• Backported to Branch:
  Committed
• Fix Priority: 3

1. Sign in as admin
2. Agree to terms of agreemnent, set reminder query
3. Sign out
4. Click "Forgot Password" Sign In Link/Sign in portlet
5. Fill out Email and text verification, Next

Results: The reminder question is not rendered

[Tammy Fong (Inactive)]

Reproduced on:
Tomcat 7.0.42 + MySQL 5. Portal master GIT ID: 7c5286a8b5d6fdf19a9c09994b815cbf9fe1a8a8.

The reminder question is not rendered.

[Tammy Fong (Inactive)]

Reproduced on:
Tomcat 7.0.42 + MySQL 5.1.35 Portal master GIT ID: 8d0d129de3f0dfc9293bd8415b1db6f62b90bcbc.
Tomcat 7.0.40 + MySQL 5.1.35 Portal 6.1.x EE GIT ID: 9cd9066a638cb185b760ec1ae33098d14875dc29.

The reminder question is not rendered.

[Tammy Fong (Inactive)]

PASSED Manual Testing following the steps in the description.

Fixed on:
Tomcat 7.0.42 + MySQL 5.1.35. Portal master GIT ID: 7496a10b0d74dac3e8e18877b7d4b73c4a34cfe8.

The user reminder query is rendered, and appears without hyphens.

[Christophe Cariou]

Any workaround for this issue, until a 6.2 GA2 ?

[Tammy Fong (Inactive)]

Hi Christophe,

Currently, there is no workaround for this issue on 6.2 CE GA1. May I suggest posting on the community forum to ask how to create a patch this issue for the build, or you could look at our open source code. You can start here. Hope this helps!

[Tammy Fong (Inactive)]

PASSED Manual Testing following the steps in the description.

Fixed on:
Tomcat 7.0.42 + MySQL 5.5.28. Portal 6.2.x EE GIT ID: 790684ea483fbd267195dc403f75970480c078cc.

The user reminder query is rendered, and appears without hyphens.