Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-83629

As a Portal Administrator I want to disable Layout's JavaScript field

    Details

      Description

      Both LPS-76618 and PTR-391 discussed the Page JavaScript field from a feature and a security vulnerability point of view.

      The simplest way to prevent editing the JavaScript is to disable the field from Layout (and LayoutSet) using portal.properties.

      However, portal admin should be able to temporarily enable JavaScript, for example when building a new site.

        Attachments

          Activity

            People

            Assignee:
            david.zhang David Zhang (Inactive)
            Reporter:
            tomas.polesovsky Tomáš Polešovský
            Recent user:
            Kiyoshi Lee
            Participants of an Issue:
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Packages

                Version Package
                7.0.0 DXP FP60
                7.0.0 DXP SP9
                7.0.X
                7.1.10 DXP FP3
                7.1.1 CE GA2
                7.1.10.1 SP1
                7.1.X
                Master