vilmospapp/liferay-portal — pull request #29 by vilmospapp (2013-06-12 14:51:01+00:00)
Title: [TECHNICAL SUPPORT] LPS-35920 Language Servlet Security Issue

Hi Tamás,

I have this ticket we discussed earlier and related to security. As I discussed in e-mail with @topolik it turned out that fixing the key/language id valid state is not enough to prevent attackers from serve offensive content by a portal related URL.

I've forwarded the e-mail thread between me and @topolik to have information what suggestions I got so you can have more understanding about my implementation.

Cheers,
Vilmos