Values with the string "]]>" will break personal data export

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.1.0 CE GA1, 7.1.10 DXP GA1, 7.1.X, Master
• Fix Version/s: Master
• Component/s: User Management > Personal Data
• Labels:
  • 7.2-should
  • QA-V
  • pt-app-security-review
• Flagged:
  Impediment
• Story Points: 1
• Fix Priority: 3
• Sprint: U&SM | Sprint 17
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/72584

When exporting personal data, if the content includes the string "]]>", export will fail with the following exception:

2018-09-13 21:43:34.963 ERROR [liferay/background_task-2][BackgroundTaskMessageListener:168] Unable to execute background task
com.liferay.portal.kernel.exception.PortalException: com.liferay.portal.kernel.exception.SystemException: org.dom4j.DocumentException: Error on line 3 of document  : The element type "column-value" must be terminated by the matching end-tag "</column-value>". Nested exception: The element type "column-value" must be terminated by the matching end-tag "</column-value>".
	at com.liferay.user.associated.data.exporter.DynamicQueryUADExporter.lambda$exportAll$0(DynamicQueryUADExporter.java:72)
	at com.liferay.portal.kernel.dao.orm.DefaultActionableDynamicQuery.performAction(DefaultActionableDynamicQuery.java:406)
	at com.liferay.portal.kernel.dao.orm.DefaultActionableDynamicQuery$1.call(DefaultActionableDynamicQuery.java:316)
	at com.liferay.portal.kernel.dao.orm.DefaultActionableDynamicQuery$1.call(DefaultActionableDynamicQuery.java:278)
	at com.liferay.portal.kernel.dao.orm.DefaultActionableDynamicQuery.doPerformActions(DefaultActionableDynamicQuery.java:336)
	at com.liferay.portal.kernel.dao.orm.DefaultActionableDynamicQuery.performActions(DefaultActionableDynamicQuery.java:86)
	at com.liferay.user.associated.data.exporter.DynamicQueryUADExporter.exportAll(DynamicQueryUADExporter.java:76)
	at com.liferay.user.associated.data.web.internal.export.controller.UADApplicationExportController._exportApplicationData(UADApplicationExportController.java:75)
	at com.liferay.user.associated.data.web.internal.export.controller.UADApplicationExportController.export(UADApplicationExportController.java:55)
	at com.liferay.user.associated.data.web.internal.export.background.task.UADExportBackgroundTaskExecutor.execute(UADExportBackgroundTaskExecutor.java:59)
	at com.liferay.portal.kernel.backgroundtask.DelegatingBackgroundTaskExecutor.execute(DelegatingBackgroundTaskExecutor.java:43)
	at com.liferay.portal.background.task.internal.ThreadLocalAwareBackgroundTaskExecutor.execute(ThreadLocalAwareBackgroundTaskExecutor.java:75)
	at com.liferay.portal.background.task.internal.messaging.BackgroundTaskMessageListener.doReceive(BackgroundTaskMessageListener.java:127)
	at com.liferay.portal.kernel.messaging.BaseMessageListener.receive(BaseMessageListener.java:26)
	at com.liferay.portal.kernel.messaging.InvokerMessageListener.receive(InvokerMessageListener.java:74)
	at com.liferay.portal.kernel.messaging.ParallelDestination$1.run(ParallelDestination.java:52)
	at com.liferay.portal.kernel.concurrent.ThreadPoolExecutor$WorkerTask._runTask(ThreadPoolExecutor.java:756)
	at com.liferay.portal.kernel.concurrent.ThreadPoolExecutor$WorkerTask.run(ThreadPoolExecutor.java:667)
	at java.lang.Thread.run(Thread.java:748)
Caused by: com.liferay.portal.kernel.exception.SystemException: org.dom4j.DocumentException: Error on line 3 of document  : The element type "column-value" must be terminated by the matching end-tag "</column-value>". Nested exception: The element type "column-value" must be terminated by the matching end-tag "</column-value>".
	at com.liferay.petra.xml.XMLUtil.formatXML(XMLUtil.java:75)
	at com.liferay.user.associated.data.exporter.DynamicQueryUADExporter.formatXML(DynamicQueryUADExporter.java:100)
	at com.liferay.user.associated.data.exporter.DynamicQueryUADExporter.export(DynamicQueryUADExporter.java:47)
	at com.liferay.user.associated.data.exporter.DynamicQueryUADExporter.writeToZip(DynamicQueryUADExporter.java:130)
	at com.liferay.user.associated.data.exporter.DynamicQueryUADExporter.lambda$exportAll$0(DynamicQueryUADExporter.java:69)
	... 18 more
Caused by: org.dom4j.DocumentException: Error on line 3 of document  : The element type "column-value" must be terminated by the matching end-tag "</column-value>". Nested exception: The element type "column-value" must be terminated by the matching end-tag "</column-value>".
	at org.dom4j.io.SAXReader.read(SAXReader.java:482)
	at org.dom4j.io.SAXReader.read(SAXReader.java:365)
	at com.liferay.petra.xml.Dom4jUtil.toString(Dom4jUtil.java:122)
	at com.liferay.petra.xml.XMLUtil.formatXML(XMLUtil.java:66)
	... 22 more