HTTP Errors - 500, 404, etc

[17年前 に Matthew Ellis によって更新されました。]

Hi guys,

When using Liferay portal in production environment you do not want to be exposing things like stracktraces to end clients because this is a security risk as well as user experience issue.

How does Liferay handle this problem? I know I can go in and edit the web.xml and add <error-page> elements, is this the recommended approach? Or is there a better way of doing this?

Cheers,
Matt.

[17年前 に Tuan Anh Nguyen によって更新されました。]

Hi Matthew,

I've got the same problem as you, and I decide to solve it as follow:

As you know, 4xx error codes imply the errors caused by client, and 5xx error codes imply the errors caused by server. So, to do this, I gotta make changes to both the Servlet container(Tomcat) and Webserver(Apache). In Tomcat, add the following elements under the web-app element:

	<error-page>
		<error-code>404</error-code>
		<location>/error_page.htm</location>
	</error-page>
        ...

And in Apache, you need to be considerate with the 5xx error codes.

Hope to see a better approach from you.

[17年前 に Matthew Ellis によって更新されました。]

Yeah that is what I have had to do as well, not the most ideal solution because each time I upgrade I need to remember to copy the pages and the XML config over as well....Liferay guys, any thoughts?

[17年前 に Michael Young によって更新されました。]

In which cases do you see these errors? I'm sure we can catch these and display something else to the user.

[17年前 に Matthew Ellis によって更新されました。]

I have a screenshot here, trying to attach it now...can't see how to do this anymore. Has this been turned off?

[17年前 に Tuan Anh Nguyen によって更新されました。]

Michael Young:

In which cases do you see these errors? I'm sure we can catch these and display something else to the user.

Hi Michael,

In case of 4xx error, I agree with you that we can catch and hide them behind the page, but we will have to make changes to the Liferay core, say, the MainServlet class. However, in such cases of 5xx error, there's no ways else but configuring the web server to be responsible for.

Regards,

[10年前 に Nitesh Sahay によって更新されました。]

Is there any way to implements the redirection on 500 http error to custom error page in liferay 6.1.1 CE GA2 ?

[10年前 に Stephane real によって更新されました。]

Maybe is related to the portal-ext.properties :
For liferay 5 version : permissions.user.check.algorithm=5
For liferay 6 version : permissions.user.check.algorithm=6