Liferay AntiSamy
Beschreibung
Liferay's AntiSamy application protects against malicious code that
users may pass intentionally or unintentionally to your portal via
their content. The app filters on specific HTML/CSS code and removes
suspect JavaScript from it. The application leverages the powerful
OWASP AntiSamy library to enforce a content policy that's been proven
effective for the online auction site eBay. The app's hook plugin adds
an OWASP AntiSamy implementation to your portal's list of existing
sanitizer implementations. Liferay Portal uses the AntiSamy sanitizer
and any existing configured sanitizers to scrub user input to blogs
entries, calendar events, message boards posts, wiki pages, and web
content articles.
This app uses OWASP AntiSamy 1.4.4 and is enabled upon the
portal's redeployment.
Weitere in Identity Management & Governance
Device Based Security
Device based security is a reusable component for Liferay. This component will secure user login as per the devices. Once user will login to portal from some particular device. Portal will store user’
Dockbar Integration
The application adds a new custom permission called VIEW_DOCKBAR inside the "General Permissions" section of the role configuration (except for Guest role). With this new custom permission,
Email MFA for Liferay CE
This module provides Multifactor Authentication (MFA) for Liferay Community Edition by introducing secure OTP (One-Time Password) authentication. It adds an extra layer of security to your Liferay env
HSTS (RFC6797) HTTP Strict Transport Security
Note: This app is for Liferay 6.x and I won't port it to 7.x. By now, I feel that unconditional HTTPS is the standard and it's not worth worrying about conditionally allowing unencrypted http . David
Weitere von Liferay Community
Accordion Set Fragment
The Accordion Set fragment brings flexible, modern accordion functionality to Liferay pages without relying on external libraries. Built with native HTML <details> elements, it’s fast, accessibl
Announcement Card
The Announcement Card fragment makes it easy to highlight news, events, or featured content in a visually engaging way. The card is fully customizable, allowing you to set your own image, date, header
Colorful Cards
Fully customizable cards where you control every detail. Pick any Clay icon, set its color, and style the button with your own background and text colors. Choose from four flexible sizes — 4x4, 4x2, 4
Content And Media Library
A generic Content and Media Library built with Liferay Objects and Picklists to manage digital assets such as documents, images, and media files. It supports metadata (type, status, visibility), versi