Web content folder names can be created with invalid character

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.1.X, Master
• Fix Version/s: 7.1.10 DXP FP8, 7.1.10.2 SP2, 7.1.3 CE GA4, 7.1.X, Master
• Component/s: Web Content > Web Content Administration
• Labels:
  • ee-ts
  • liferay-dxp-71-sp2
  • liferay-fixpack-dxp-8-7110
• Branch Version/s:
  7.1.x
• Backported to Branch:
  Committed
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/67335

Reproduction Steps:

 

1. Set up Liferay.
2. Go to Control Panel->Configuration->System Settings->Web Content->Virtual Instance Scope->Web Content.
3. Confirm the following 22 characters are blacklisted by default (separated by |):

&|'|@|\|]|}|:|=|>|/|<|[|{|%|+|#|`|?|"|;|*|~

4. Go to Content->Web Content
5. Try to create a folder with any of the blacklisted characters EXCEPT for the following three:

'|\|`|

6. Confirm that the following two error messages appear:

The Folder Name cannot be Blank or a reserved word such as null.

The Folder Name cannot contain the following invalid characters: & \' @
] } : = > / < [ { % + # ` ? \" ; * ~.

7. Try to create a folder with any of the earlier three characters:

'|\|`|

 

Actual Result: The folder is created successfully.

Expected Result: The error messages from Step #6 should appear.

 

Reproducible in Master @ 2109262d8f92846617e9c8be744ccea10195006f

Reproducible in 71x       @ 7d6d3f500f0588203e74eabefe8cd396b13eaaa7