Liferay JSF Portlet Security

[10年前 に Sreeraman A によって更新されました。]

Hello,

How does liferay implement security for JSF portlets? In otherwords, does liferay implement OWASP standards to protect JSF portlets? If so, is there any configuration required for enabling it?

Thank you...

[10年前 に Neil Griffin によって更新されました。]

JSF portlets do not differ from plain Java portlets with respect to security. The web page for Liferay Portal EE indicates:

Liferay Portal EE implements the Top 10 recommended best practices published by the OWASP organization.