Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-88322

Allow specifying an AntiSamy configuration file outside the module bundle

    Details

      Description

      Background
      AntiSamy module comes bundled with the default AntiSamy settings/definition.
      https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/owaspantisamy/antisamy-ebay-1.4.4.xml

      Tuning the settings
      Those default settings accommodate to most general use. However there are many times where some minor changes will be required to fit the business needs.

      In order to override the definition, a tuned xml must be inserted into the saml bundle  (com.liferay.portal.security.antisamy.jar) and specify the new path in "System Settings > AntiSamy Sanitizer >  Configuration File URL".

      Issue
      In order to customize AntiSamy settings, messing with the module's jar file is cumbersome and have  the risk of losing the custom settings when updating to newer fixpacks or hotfix.

      Feature Request
      "Configuration File URL" should allow reading the data from an XML outside the module providing an absolute path.

        Attachments

          Activity

            People

            • Assignee:
              support-lep@liferay.com SE Support
              Reporter:
              jordi.rodo Jordi Rodó
            • Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:

                Packages

                Version Package