juliocamarero/liferay-portal — pull request #2990 by arbetts (2014-07-21 23:48:06+00:00)
Title: Holatuwol lps 48683

Hey Julio,

I tested your changes and it didn't resolve the issue described on the LPS. In investigating it however, I don't think we can fix the issue for URL injection. Any place where we would change the groupId to the staginggroupId would break other cases (like managing pages from UserGroups). If we can't get to the issue through the UI (or through a sample portlet) it seems like it is not a necessary fix.

I think that we still need to fix the ServicePreAction because we could use a sample portlet to get the themeDisplay.getURLSitePagesSettings() and that would return the wrong groupId if staging is enabled.