[LPS-88398] XSS when adding a record - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Resolution: No Longer Reproducible
Affects Version/s: 7.0.X, 7.1.X
Fix Version/s: 7.0.X, 7.1.X
Component/s: Dynamic Data Lists, Security Vulnerability
Labels:

Fix Priority:
4

QA Test Name:
- LocalFile.DynamicdatalistsUsecase#AddXSSToHTMLField
QA Test Score:
4

Description

Steps to reproduce:

Go to Dynamic Data Lists -> Manage Data Definitions, new create a Data Definiton "Test Data Definition".
- Add a HTML field, set the Predefined Value to
```
'+alert('xss')+'"+alert("xss")+"
```
Add a List "Test List" selected the new created Data Definition "Test Data Definition".
Add a record.
- Change the HEML field form Editor View to Code View
- Replace the content to
```
<img src=x onerror=alert(/xss/) />
```
- Change back to Editor View, then Publish.

Expected Result:
No popups.

Actual Result:
A popup, and the console the following error:

2018-12-13 08:25:16.873 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][BaseAutoDeployListener:50] Themes for F:\bundles\dailybundle\7.0.x-private-20181213-Felix\7.0.x-private-20181213-Felix\tomcat-8.0.53\temp\20181213082510243ONGQIJQP\westeros-bank-theme.war copied successfully
2018-12-13 08:25:19.087 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][HotDeployImpl:226] Deploying 1975-london-theme from queue
2018-12-13 08:25:19.088 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][PluginPackageUtil:1003] Reading plugin package for 1975-london-theme
13-Dec-2018 08:25:19.091 淇℃伅 [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war] org.apache.catalina.core.ApplicationContext.log Initializing Spring root WebApplicationContext
2018-12-13 08:25:19.094 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][ThemeHotDeployListener:95] Registering themes for 1975-london-theme
2018-12-13 08:25:20.324 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][ThemeHotDeployListener:110] 1 theme for 1975-london-theme is available for use
2018-12-13 08:25:20.355 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][BundleStartStopLogger:35] STARTED 1975-london-theme_1.0.43 [709]
2018-12-13 08:25:20.446 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:20.773 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][HotDeployImpl:226] Deploying fjord-theme from queue
2018-12-13 08:25:20.773 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][PluginPackageUtil:1003] Reading plugin package for fjord-theme
13-Dec-2018 08:25:20.777 淇℃伅 [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war] org.apache.catalina.core.ApplicationContext.log Initializing Spring root WebApplicationContext
2018-12-13 08:25:20.782 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][ThemeHotDeployListener:95] Registering themes for fjord-theme
2018-12-13 08:25:22.297 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][ThemeHotDeployListener:110] 1 theme for fjord-theme is available for use
2018-12-13 08:25:22.326 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][BundleStartStopLogger:35] STARTED fjord-theme_1.0.47 [710]
2018-12-13 08:25:22.701 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][HotDeployImpl:226] Deploying porygon-theme from queue
2018-12-13 08:25:22.702 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][PluginPackageUtil:1003] Reading plugin package for porygon-theme
13-Dec-2018 08:25:22.704 淇℃伅 [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war] org.apache.catalina.core.ApplicationContext.log Initializing Spring root WebApplicationContext
2018-12-13 08:25:22.707 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][ThemeHotDeployListener:95] Registering themes for porygon-theme
2018-12-13 08:25:23.297 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:24.285 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:24.449 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][ThemeHotDeployListener:110] 1 theme for porygon-theme is available for use
2018-12-13 08:25:24.517 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][BundleStartStopLogger:35] STARTED porygon-theme_1.0.44 [711]
2018-12-13 08:25:24.973 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:25.023 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][HotDeployImpl:226] Deploying westeros-bank-theme from queue
2018-12-13 08:25:25.023 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][PluginPackageUtil:1003] Reading plugin package for westeros-bank-theme
13-Dec-2018 08:25:25.025 淇℃伅 [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war] org.apache.catalina.core.ApplicationContext.log Initializing Spring root WebApplicationContext
2018-12-13 08:25:25.031 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][ThemeHotDeployListener:95] Registering themes for westeros-bank-theme
2018-12-13 08:25:25.177 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:26.047 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:26.420 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:26.642 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:27.195 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][ThemeHotDeployListener:110] 1 theme for westeros-bank-theme is available for use
2018-12-13 08:25:27.254 INFO  [fileinstall-F:/bundles/dailybundle/7.0.x-private-20181213-Felix/7.0.x-private-20181213-Felix/osgi/war][BundleStartStopLogger:35] STARTED westeros-bank-theme_1.0.60 [712]
2018-12-13 08:25:29.544 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:29.605 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:31.522 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:33.094 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:33.325 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:33.497 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:36.676 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:43.163 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:43.204 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:43.358 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:43.496 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:43.595 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:43.668 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:25:43.783 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:29:00.153 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:29:56.023 WARN  [http-nio-9080-exec-2][PortalImpl:6835] com.liferay.portal.kernel.exception.NoSuchLayoutException: com.liferay.portal.kernel.exception.NoSuchLayoutException: {groupId=20132, privateLayout=true, friendlyURL=/x}
com.liferay.portal.kernel.exception.NoSuchLayoutException: com.liferay.portal.kernel.exception.NoSuchLayoutException: {groupId=20132, privateLayout=true, friendlyURL=/x}
        at com.liferay.portal.util.PortalImpl.getLayoutFriendlyURLSeparatorComposite(PortalImpl.java:2959)
        at com.liferay.portal.kernel.util.PortalUtil.getLayoutFriendlyURLSeparatorComposite(PortalUtil.java:1211)
        at com.liferay.portal.servlet.FriendlyURLServlet.getRedirect(FriendlyURLServlet.java:316)
        at com.liferay.portal.servlet.FriendlyURLServlet.service(FriendlyURLServlet.java:117)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:292)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
        at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:119)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.frontend.compatibility.ie.servlet.filter.IEMimeTypeCompatibilityFilter.processFilter(IEMimeTypeCompatibilityFilter.java:48)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.uploadservletrequest.UploadServletRequestFilter.processFilter(UploadServletRequestFilter.java:93)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.strip.StripFilter.processFilter(StripFilter.java:344)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.i18n.I18nFilter.processFilter(I18nFilter.java:368)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.secure.BaseAuthFilter.processFilter(BaseAuthFilter.java:340)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.etag.ETagFilter.processFilter(ETagFilter.java:86)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.jsoncontenttype.JSONContentTypeFilter.processFilter(JSONContentTypeFilter.java:42)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.autologin.AutoLoginFilter.processFilter(AutoLoginFilter.java:261)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.sharepoint.SharepointFilter.processFilter(SharepointFilter.java:88)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.virtualhost.VirtualHostFilter.processFilter(VirtualHostFilter.java:263)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.monitoring.internal.servlet.filter.MonitoringFilter.processFilter(MonitoringFilter.java:181)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:188)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:188)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
        at org.tuckey.web.filters.urlrewrite.RuleChain.handleRewrite(RuleChain.java:176)
        at org.tuckey.web.filters.urlrewrite.RuleChain.doRules(RuleChain.java:145)
        at org.tuckey.web.filters.urlrewrite.UrlRewriter.processRequest(UrlRewriter.java:92)
        at org.tuckey.web.filters.urlrewrite.UrlRewriteFilter.doFilter(UrlRewriteFilter.java:394)
        at com.liferay.portal.servlet.filters.urlrewrite.UrlRewriteFilter.processFilter(UrlRewriteFilter.java:65)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:168)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:168)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:188)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilter.doFilter(InvokerFilter.java:101)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:212)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:94)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:492)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:141)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:80)
        at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:620)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:88)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:502)
        at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1152)
        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:684)
        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1539)
        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1495)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
        at java.lang.Thread.run(Thread.java:748)
Caused by: com.liferay.portal.kernel.exception.NoSuchLayoutException: {groupId=20132, privateLayout=true, friendlyURL=/x}
        at com.liferay.portal.service.impl.LayoutLocalServiceImpl.getFriendlyURLLayout(LayoutLocalServiceImpl.java:1180)
        at sun.reflect.GeneratedMethodAccessor1714.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:163)
        at com.liferay.portal.service.impl.LayoutLocalServiceStagingAdvice.invoke(LayoutLocalServiceStagingAdvice.java:138)
        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:137)
        at com.liferay.portal.spring.transaction.DefaultTransactionExecutor.execute(DefaultTransactionExecutor.java:54)
        at com.liferay.portal.spring.transaction.TransactionInterceptor.invoke(TransactionInterceptor.java:58)
        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:137)
        at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(ChainableMethodAdvice.java:56)
        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:137)
        at com.liferay.portal.spring.aop.ServiceBeanAopProxy.invoke(ServiceBeanAopProxy.java:169)
        at com.sun.proxy.$Proxy104.getFriendlyURLLayout(Unknown Source)
        at com.liferay.portal.kernel.service.LayoutLocalServiceUtil.getFriendlyURLLayout(LayoutLocalServiceUtil.java:773)
        at com.liferay.portal.util.PortalImpl.getPortletFriendlyURLMapperLayoutQueryStringComposite(PortalImpl.java:4443)
        at com.liferay.portal.util.PortalImpl.getActualLayoutQueryStringComposite(PortalImpl.java:1084)
        at com.liferay.portal.kernel.util.PortalUtil.getActualLayoutQueryStringComposite(PortalUtil.java:343)
        at com.liferay.portal.kernel.portlet.VirtualLayoutFriendlyURLResolver.getLayoutFriendlyURLComposite(VirtualLayoutFriendlyURLResolver.java:117)
        at com.liferay.portal.kernel.portlet.VirtualLayoutFriendlyURLResolver.getLayoutFriendlyURLSeparatorComposite(VirtualLayoutFriendlyURLResolver.java:134)
        at com.liferay.portal.util.PortalImpl.getLayoutFriendlyURLSeparatorComposite(PortalImpl.java:2952)
        ... 102 more
2018-12-13 08:29:58.306 INFO  [elasticsearch[Micro][clusterService#updateTask][T#1]][metadata:317] [Micro] [liferay-20115] update_mapping [LiferayDocumentType]
2018-12-13 08:30:00.763 WARN  [http-nio-9080-exec-4][PortalImpl:6835] com.liferay.portal.kernel.exception.NoSuchLayoutException: com.liferay.portal.kernel.exception.NoSuchLayoutException: {groupId=20132, privateLayout=true, friendlyURL=/x}
com.liferay.portal.kernel.exception.NoSuchLayoutException: com.liferay.portal.kernel.exception.NoSuchLayoutException: {groupId=20132, privateLayout=true, friendlyURL=/x}
        at com.liferay.portal.util.PortalImpl.getLayoutFriendlyURLSeparatorComposite(PortalImpl.java:2959)
        at com.liferay.portal.kernel.util.PortalUtil.getLayoutFriendlyURLSeparatorComposite(PortalUtil.java:1211)
        at com.liferay.portal.servlet.FriendlyURLServlet.getRedirect(FriendlyURLServlet.java:316)
        at com.liferay.portal.servlet.FriendlyURLServlet.service(FriendlyURLServlet.java:117)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:292)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
        at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:119)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.frontend.compatibility.ie.servlet.filter.IEMimeTypeCompatibilityFilter.processFilter(IEMimeTypeCompatibilityFilter.java:48)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.uploadservletrequest.UploadServletRequestFilter.processFilter(UploadServletRequestFilter.java:93)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.strip.StripFilter.processFilter(StripFilter.java:344)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.i18n.I18nFilter.processFilter(I18nFilter.java:368)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.secure.BaseAuthFilter.processFilter(BaseAuthFilter.java:340)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.etag.ETagFilter.processFilter(ETagFilter.java:86)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.jsoncontenttype.JSONContentTypeFilter.processFilter(JSONContentTypeFilter.java:42)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.autologin.AutoLoginFilter.processFilter(AutoLoginFilter.java:261)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.sharepoint.SharepointFilter.processFilter(SharepointFilter.java:88)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.servlet.filters.virtualhost.VirtualHostFilter.processFilter(VirtualHostFilter.java:263)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.BaseFilter.processFilter(BaseFilter.java:144)
        at com.liferay.portal.monitoring.internal.servlet.filter.MonitoringFilter.processFilter(MonitoringFilter.java:181)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:188)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:188)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
        at org.tuckey.web.filters.urlrewrite.RuleChain.handleRewrite(RuleChain.java:176)
        at org.tuckey.web.filters.urlrewrite.RuleChain.doRules(RuleChain.java:145)
        at org.tuckey.web.filters.urlrewrite.UrlRewriter.processRequest(UrlRewriter.java:92)
        at org.tuckey.web.filters.urlrewrite.UrlRewriteFilter.doFilter(UrlRewriteFilter.java:394)
        at com.liferay.portal.servlet.filters.urlrewrite.UrlRewriteFilter.processFilter(UrlRewriteFilter.java:65)
        at com.liferay.portal.kernel.servlet.BaseFilter.doFilter(BaseFilter.java:49)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDoFilter(InvokerFilterChain.java:207)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:112)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:168)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:168)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.processDirectCallFilter(InvokerFilterChain.java:188)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilterChain.doFilter(InvokerFilterChain.java:96)
        at com.liferay.portal.kernel.servlet.filters.invoker.InvokerFilter.doFilter(InvokerFilter.java:101)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:212)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:94)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:492)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:141)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:80)
        at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:620)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:88)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:502)
        at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1152)
        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:684)
        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1539)
        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1495)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
        at java.lang.Thread.run(Thread.java:748)
Caused by: com.liferay.portal.kernel.exception.NoSuchLayoutException: {groupId=20132, privateLayout=true, friendlyURL=/x}
        at com.liferay.portal.service.impl.LayoutLocalServiceImpl.getFriendlyURLLayout(LayoutLocalServiceImpl.java:1180)
        at sun.reflect.GeneratedMethodAccessor1714.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:163)
        at com.liferay.portal.service.impl.LayoutLocalServiceStagingAdvice.invoke(LayoutLocalServiceStagingAdvice.java:138)
        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:137)
        at com.liferay.portal.spring.transaction.DefaultTransactionExecutor.execute(DefaultTransactionExecutor.java:54)
        at com.liferay.portal.spring.transaction.TransactionInterceptor.invoke(TransactionInterceptor.java:58)
        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:137)
        at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(ChainableMethodAdvice.java:56)
        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:137)
        at com.liferay.portal.spring.aop.ServiceBeanAopProxy.invoke(ServiceBeanAopProxy.java:169)
        at com.sun.proxy.$Proxy104.getFriendlyURLLayout(Unknown Source)
        at com.liferay.portal.kernel.service.LayoutLocalServiceUtil.getFriendlyURLLayout(LayoutLocalServiceUtil.java:773)
        at com.liferay.portal.util.PortalImpl.getPortletFriendlyURLMapperLayoutQueryStringComposite(PortalImpl.java:4443)
        at com.liferay.portal.util.PortalImpl.getActualLayoutQueryStringComposite(PortalImpl.java:1084)
        at com.liferay.portal.kernel.util.PortalUtil.getActualLayoutQueryStringComposite(PortalUtil.java:343)
        at com.liferay.portal.kernel.portlet.VirtualLayoutFriendlyURLResolver.getLayoutFriendlyURLComposite(VirtualLayoutFriendlyURLResolver.java:117)
        at com.liferay.portal.kernel.portlet.VirtualLayoutFriendlyURLResolver.getLayoutFriendlyURLSeparatorComposite(VirtualLayoutFriendlyURLResolver.java:134)
        at com.liferay.portal.util.PortalImpl.getLayoutFriendlyURLSeparatorComposite(PortalImpl.java:2952)
        ... 102 more

Attachments

Options
- Sort By Name
- Sort By Date
- Ascending
- Descending
- Thumbnails
- List
- Download All

Attachments

xss.png
252 kB
13/Dec/18 10:56 PM

Activity

People

Assignee:: Felix Zhang

Reporter:: Felix Zhang

Participants of an Issue:: Alex Candido, Felix Zhang, Yuxing Wu

Recent user:: Tibor Lipusz

Votes:: 0 Vote for this issue

Watchers:: 6 Start watching this issue

Dates

Created:: 13/Dec/18 12:47 AM

Updated:: 18/Mar/20 2:24 AM

Resolved:: 18/Mar/20 1:43 AM

Days since last comment:: 1 year, 27 weeks, 5 days ago

Packages

Version	Package
7.0.X
7.1.X