Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-83629

As a Portal Administrator I want to disable Layout's JavaScript field

    Details

      Description

      Both LPS-76618 and PTR-391 discussed the Page JavaScript field from a feature and a security vulnerability point of view.

      The simplest way to prevent editing the JavaScript is to disable the field from Layout (and LayoutSet) using portal.properties.

      However, portal admin should be able to temporarily enable JavaScript, for example when building a new site.

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Packages

                Version Package
                7.0.0 DXP FP60
                7.0.0 DXP SP9
                7.0.X
                7.1.10 DXP FP3
                7.1.1 CE GA2
                7.1.10.1 SP1
                7.1.X
                Master