Updated Portal Property Default Values for Virtual Hosts

Issue

  • Virtual Host defaults were changed from a wildcard value to secure default values.

    Previous Value:
    virtual.hosts.valid.hosts=*
    Updated Value:
    virtual.hosts.valid.hosts=localhost,127.0.0.1,[::1],[0:0:0:0:0:0:0:1]

Environment

  • Liferay DXP 2023.Q3+
  • Liferay DXP 7.4 Update 86+
  • Liferay DXP 7.3 Update 34+
  • This affects all who use the wildcard value with the virtual.hosts.valid.hosts portal property or do not have the property set in their portal-ext.properties file.

Resolution

Liferay DXP

  • This is a breaking change documented here.
  • Please include the proper virtual hosts and addresses within the portal property in order to secure the environment:
    virtual.hosts.valid.hosts=

LXC-SM 

  • Ensure that you have deployed Liferay DXP image version 5.3.0+
liferaycloud/liferay-dxp:7.4-5.3.0
liferaycloud/liferay-dxp:7.3-5.3.0

Additional Information

Was this article helpful?
3 out of 3 found this helpful