Details

    • Type: Bug
    • Status: Open
    • Resolution: Unresolved
    • Affects Version/s: 6.2.10 EE GA1
    • Fix Version/s: None
    • Component/s: Core Infrastructure
    • Labels:
      None

      Description

      AggregateFilter is too aggressive

      AggregateFilter is too aggressive if the required pattern is any path of the URL.

      This allows to display AlloyUI scripts example with following URL's.

      http://localhost:8080/omg/wtf.jsp?myurl=http://localhost:8080/html/js/everything.jsp?browserId=other&themeId=classic&colorSchemeId=01&minifierType=js&minifierBundleId=javascript.everything.files&languageId=en_US&b=6210&t=1

      This can be traced at url-regex-pattern parameter.

      	<filter>
      		<filter-name>Aggregate Filter - JSP</filter-name>
      		<filter-class&gt;com.liferay.portal.servlet.filters.aggregate.AggregateFilter</filter-class&gt;
      		<init-param>
      			<param-name>url-regex-pattern</param-name>
      			<param-value>.+/(aui_lang|barebone|css|everything|main)\.jsp</param-value>
      		</init-param>
      	</filter>
      

      This issue is also valid with Fixpack 169.

      Related issue: LPS-91975

        Attachments

          Activity

            People

            • Assignee:
              support-lep@liferay.com SE Support
              Reporter:
              sammso Sampsa Sohlman
              Participants of an Issue:
              Recent user:
              Sampsa Sohlman
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Days since last comment:
                10 weeks ago