Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-73754

Module Version information is exposed when applyVersioning is disabled

    Details

    • Type: Bug
    • Status: Closed
    • Resolution: Won't Fix
    • Affects Version/s: Master
    • Fix Version/s: None
    • Component/s: AMD Module Loader
    • Labels:
      None

      Description

      When the applyVersioning setting of the JavaScript Loader is disabled, no module version information should be leaked.

      Steps to reproduce:

      • Log into a Liferay Portal instance
      • Navigate to Configuration > System Settings > Foundation > JavaScript Loader
      • Disable the Apply Versioning checkbox and click Save
      • In a browser page, fetch the result from http://localhost:8080/o/js_loader_modules

      Expected:
      No version information should be found in the response (no @x.x.x bits)

      Current Result:
      Version information can be found in several places

        Attachments

          Activity

            People

            Assignee:
            ivan.zaera Ivan Zaera
            Reporter:
            jose.balsas Chema Balsas
            Participants of an Issue:
            Recent user:
            Ivan Zaera
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              3 years, 18 weeks ago

                Packages

                Version Package