Updated Portal Property Default Values for Virtual Hosts

Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM).

Issue

• Virtual Host defaults were changed from a wildcard value to secure default values.
  
  Previous Value:

  virtual.hosts.valid.hosts=*

  Updated Value:
  

  virtual.hosts.valid.hosts=localhost,127.0.0.1,[::1],[0:0:0:0:0:0:0:1]

Environment

• Liferay DXP 2023.Q3+
• Liferay DXP 7.4 Update 86+
• Liferay DXP 7.3 Update 34+
• This affects all who use the wildcard value with the virtual.hosts.valid.hosts portal property or do not have the property set in their portal-ext.properties file.

Resolution

Liferay DXP

• This is a breaking change documented here.
• Please include the proper virtual hosts and addresses within the portal property in order to secure the environment:
  

  virtual.hosts.valid.hosts=

Liferay PaaS

• Ensure that you have deployed Liferay DXP image version 5.3.0+

liferaycloud/liferay-dxp:7.4-5.3.0
liferaycloud/liferay-dxp:7.3-5.3.0

Additional Information

• LPE-17758
• On Liferay PaaS, the new default property will prevent the readiness probe from succeeding. As a consequence, the liferay service deployment is going to time out unless you set virtual.hosts.valid.hosts=* in portal-ext.properties.