Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-73754

Module Version information is exposed when applyVersioning is disabled

    Details

      Description

      When the applyVersioning setting of the JavaScript Loader is disabled, no module version information should be leaked.

      Steps to reproduce:

      • Log into a Liferay Portal instance
      • Navigate to Configuration > System Settings > Foundation > JavaScript Loader
      • Disable the Apply Versioning checkbox and click Save
      • In a browser page, fetch the result from http://localhost:8080/o/js_loader_modules

      Expected:
      No version information should be found in the response (no @x.x.x bits)

      Current Result:
      Version information can be found in several places

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                1 year, 42 weeks, 3 days ago