| Security |
| Malicious javascript can be inserted into the quick note portlet | LPE-1245 |
| Any password is allowed when NTLM authentication is used in non-domain based scenarios | LPE-1400 |
| Make phishing protection more secure | LPE-1235 |
| Performance |
| Document Library fails during load testing | LPE-1289 |
| Deleting a community does not delete the staging data | LPE-1239 |
| Some JavaScript is not being minified | LPE-1280 |
| Chat portlet creates too many connections with server | LPE-1291 |
| ETag caching does not work with WebLogic | LPE-1325 |
| Upgrading a large database is unnecessarily slow - Alter column type | LPE-1343 |
| Upgrading a large database is unnecessarily slow - Update inner join | LPE-1345 |
| General |
| Portlet 2.0 (JSR 286) Compliance - Public render parameters | LPE-1359 |
| Return to full page link does not work with WSRP portlets | LPE-1208 |
| Updated source code to take advantage of generics | LPE-1237 |
| PhoneLocalService does not work with classes other than Account, Contact and Organization | LPE-1259 |
| Tree menu in Manage Page does not work | LPE-1268 |
| The strings, "n", "nu", and "nul" do not pass validation | LPE-1284 |
| Various SAXReader related errors | LPE-1305 |
| VirtualHostFilter prevents application server from serving static files | LPE-1314 |
| Specifying an empty list of static portlets causes errors | LPE-1316 |
| Schedule tasks are executed before the portal has started | LPE-1326 |
| Scheduled jobs are not executed if there's an existing job with the same name | LPE-1330 |
| Adding or removing a portlet may cause an error | LPE-1340 |
| Render parameters are cleared on every request | LPE-1347 |
| Concurrency issue with modifying/viewing a page | LPE-1354 |
| Blocking cache properties are not read | LPE-1374 |
| Duplicate parameters in request | LPE-1378 |
| Portlet events are not distributed to portlets on other pages | LPE-1379 |
| Omitting JavaScript fields in Manage Pages causes JavaScript errors | LPE-1420 |
| Class loading issue with Hibernate | LPE-1478 |
| Improved error messaging in MimeResponseImpl | LPE-1361 |
| Added a convenience property to disable Ehcache from using blocking caches | LPE-1496 |
| Permissions cache causes portal to dead lock and go down | LPE-1495 |
| Authentication |
| Any password is allowed when NTLM authentication is used in non-domain based scenarios | LPE-1400 |
| Make phishing protection more secure | LPE-1235 |
| Unable to import users and groups when there is a slash in the LDAP path | LPE-1261 |
| Deep linking when using CAS or NTLM does not work | LPE-1272 |
| CAS SSO with LDAP does not update existing users in Liferay when LDAP data changes | LPE-1297 |
| NTLM Authentication does not properly read properties from Enterprise Admin | LPE-1381 |
| Some users and groups in Active Directory are not imported | LPE-1196 |
| New users are not exported to LDAP | LPE-1327 |
| Control Panel |
| Can't manage user's private pages from enterprise admin portlet | LPE-1251 |
| Mail configuration shows IMAP settings in the POP section | LPE-1230 |
| File Uploads settings in the Admin portlet are not saved | LPE-1246 |
| Manage Pages option of Enterprise Admin portlet is not allowed if public pages are disabled | LPE-1262 |
| Editing a user will remove and re-add roles | LPE-1358 |
| Monitoring section always indicate there's zero session | LPE-1341 |
| Database |
| Deleting a community does not delete the staging data | LPE-1239 |
| Automatically fix database integrity issues | LPE-1276 |
| Unused database connections are never released | LPE-1277 |
| New connection pool options | LPE-1295 |
| Added SQL create scripts for sharding environments | LPE-1306 |
| Dirty data in Resource_ table | LPE-1337 |
| Upgrading a large database is unnecessarily slow - Alter column type | LPE-1343 |
| Upgrading a large database is unnecessarily slow - Update inner join | LPE-1345 |
| Sample data was not updated to include new columns in the Organization table | LPE-1265 |
| Export / Import (LAR) |
| Exporting communities do not remove temporary files | LPE-1253 |
| Framework / API |
| Search does not work after removing a search engine adapter | LPE-1186 |
| Add support for notification of listeners for registration of MessageListeners in MessageBus | LPE-1189 |
| Portlet 2.0 (JSR 286) Compliance - javax.portlet.description is ignored | LPE-1248 |
| Stop words are always removed from search queries | LPE-1185 |
| New formatting style added to TextFormatter | LPE-1202 |
| New method to merge layoutURL with portalURL | LPE-1204 |
| SourceFormatter may not detect nested quotes in taglibs | LPE-1223 |
| Ehcache updated from 1.6.0 B3 to 1.6.1 | LPE-1233 |
| Clustering support for MessageBus | LPE-1254 |
| Search Portlet does not correctly link to Journal/Web Content articles | LPE-1255 |
| Cannot serialize objects to JSON in plugins | LPE-1266 |
| JGroups updated from 2.6.2 to 2.6.11 B3 | LPE-1269 |
| New double quote static variable in StringPool | LPE-1283 |
| The strings, "n", "nu", and "nul" do not pass validation | LPE-1284 |
| New utility method to get an IP address from a URL | LPE-1298 |
| Added methods to add public render parameters from plugins | LPE-1308 |
| Added support for a SimpleTrigger in QuartzSchedulerEngine | LPE-1310 |
| Added support for actions in MVCPortlet | LPE-1323 |
| Added support for invoking non-static methods in MethodInvoker | LPE-1329 |
| Removed unnecessary Invoker* wrappers that only set and unset class loaders | LPE-1356 |
| Service Builder will now automatically generate a reference to Counter and Resource | LPE-1371 |
| Commons Lang updated from 2.3.0 to 2.4.0 | LPE-1372 |
| SimpleDateFormat causes thread locks | LPE-1373 |
| Removed <constructor-arg> from Spring configuration files | LPE-1393 |
| Deprecated unused Velocity spring configuration classes | LPE-1423 |
| AggregateClassLoader can only aggregate two class loaders | LPE-1428 |
| Adding a non-serializable objects to a shared session now generates an error | LPE-1336 |
| High Availability / Clustering |
| Document Library Locking does not work in a clustered environment | LPE-1252 |
| Clustering support for MessageBus | LPE-1254 |
| Cannot add new resources because of the counter deadlocks | LPE-1258 |
| Searching does not work in a cluster environment | LPE-1315 |
| Updated internal calls to CommLink with calls to ClusterLink | LPE-1333 |
| Lucene search does not work in a clustered environment | LPE-1352 |
| JavaScript |
| JavaScript services do not work if a parameter contains a comma | LPE-1126 |
| Some JavaScript is not being minified | LPE-1280 |
| Sometimes 2 portlets are added to the page when adding a portlet | LPE-1285 |
| Chat portlet creates too many connections with server | LPE-1291 |
| Chat portlet continues to operate after a session expires | LPE-1292 |
| Setting focus on an hidden element causes errors in IE | LPE-1304 |
| New rows in autoFields have the wrong name attribute for radio elements | LPE-1321 |
| Localization |
| Default locale of new users are incorrect | LPE-1238 |
| Language keys can now be renamed | LPE-1282 |
| Web content doesn't save default language properly when localized is checked | LPE-1344 |
| Locale flags are shown for Journal/Web Content even if only one locale is available | LPE-1220 |
| Permissions |
| View permission on an object does not check if the user has view permission on the parent container | LPE-1197 |
| Portlet permissions are lost when the list of roles is paginated | LPE-1241 |
| Non administrators cannot be given permission to add users | LPE-1271 |
| Plugin Hooks |
| auth.failure can now be set from a plugin hook | LPE-1355 |
| Plugin Portlet - Chat |
| New chat messages cause the chat bar to disappear below the browser | LPE-1287 |
| Chat portlet creates too many connections with server | LPE-1291 |
| Chat portlet continues to operate after a session expires | LPE-1292 |
| IFrame appears in the Chat portlet | LPE-1331 |
| Plugin Portlet - WOL |
| Joining an open community through the Summary Portlet sends a request to the administrator | LPE-1207 |
| Blogs link appear in Summary portlet even if user does not have any blogs | LPE-1191 |
| Plugin Portlet - WSRP |
| WSRP proper calling of portletClassLoader | LPE-1463 |
| Displaying WSRP search results causes exceptions | LPE-1464 |
| Incorrectly set cookies in WSRP causes exceptions | LPE-1465 |
| Additional producer portlets cannot be added to WSRP | LPE-1466 |
| Cannot add a producer to WSRP portlet | LPE-1346 |
| Adding a WSRP consumer portlet to a page causes errors | LPE-1473 |
| Plugin Portlets |
| Cannot deploy plugins using service builder on a server without internet access | LPE-1307 |
| Prevent inclusion of portal-impl.jar in plugins portlets | LPE-1332 |
| Plugins accessing a portal class that throws an error does not output the cause of the error in the logs | LPE-1360 |
| Service builder does not work with plugins that uses Spring/Spring MVC | LPE-1474 |
| Adding a non-serializable objects to a shared session now generates an error | LPE-1336 |
| Plugin Web - Solr Search Engine |
| The Solr plugin does not index an array of values correctly | LPE-1188 |
| Searching for users in the Control Panel with Solr does not work | LPE-1489 |
| Plugins |
| URL's that are generated will break if the portal context is not "/" | LPE-1236 |
| Added methods to add public render parameters from plugins | LPE-1308 |
| Cannot deploy Liferay to a path that contains spaces | LPE-1367 |
| Class loading issue with classes in a plugin | LPE-1437 |
| Portlet |
| Portlet permissions are lost when the list of roles is paginated | LPE-1241 |
| URL's that are generated will break if the portal context is not "/" | LPE-1236 |
| portlet_configuration/archived_setup_action.jsp imports the wrong init.jsp | LPE-1257 |
| Sometimes 2 portlets are added to the page when adding a portlet | LPE-1285 |
| CacheContol does not override the cache setting in portlet.xml | LPE-1309 |
| "Return to Full Page" link does not work | LPE-1312 |
| Portlet - Activities |
| "Back" link in Calendar portlet does not work | LPE-1293 |
| The name of the community is not linked in the Activities portlet | LPE-1294 |
| Portlet - Admin |
| Mail configuration shows IMAP settings in the POP section | LPE-1230 |
| File Uploads settings in the Admin portlet are not saved | LPE-1246 |
| Portlet - Announcement |
| Announcements do not get sent to members not directly assigned to a community or organization | LPE-1221 |
| Portlet - Blog |
| Users with delete permission for Blog entries cannot see the delete button | LPE-1273 |
| Permissions error occurs when a trackback is received | LPE-1296 |
| Added Blogs trackback spam checking | LPE-1368 |
| Portlet - Bookmarks |
| Image gallery / bookmarks portlet searches cannot find images / bookmarks that were merged to its parent folder | LPE-1274 |
| Portlet - Calendar |
| "Back" link in Calendar portlet does not work | LPE-1293 |
| Portlet - Document Library |
| Document Library fails during load testing | LPE-1289 |
| Downloading pdf files may result in garbage displayed in the browser | LPE-1187 |
| Document Library Locking does not work in a clustered environment | LPE-1252 |
| Portlet - Enterprise Admin |
| Can't manage user's private pages from enterprise admin portlet | LPE-1251 |
| Viewing users in the enterprise admin portlet may show a blank page for non-administrator users | LPE-1195 |
| Manage Pages option of Enterprise Admin portlet is not allowed if public pages are disabled | LPE-1262 |
| Editing a user will remove and re-add roles | LPE-1358 |
| Monitoring section always indicate there's zero session | LPE-1341 |
| Portlet - IFrame |
| IFrame portlet does not obey the height attribute | LPE-1203 |
| Portlet - Image Gallery |
| Search Portlet results for the Image Gallery have incorrect links | LPE-1206 |
| Image Gallery's images uses unhelpful alt attribute | LPE-1212 |
| Image gallery / bookmarks portlet searches cannot find images / bookmarks that were merged to its parent folder | LPE-1274 |
| Portlet - Journal / Web Content |
| Links to private pages do not work in Journal / Web Content | LPE-1313 |
| Search Portlet does not correctly link to Journal/Web Content articles | LPE-1255 |
| IE 8 does not allow Journal/Web Content with secure and unsecure content | LPE-1281 |
| Web content doesn't save default language properly when localized is checked | LPE-1344 |
| Locale flags are shown for Journal/Web Content even if only one locale is available | LPE-1220 |
| Portlet - Message Boards |
| New threads are created for email replies to the message boards | LPE-1219 |
| Message boards subscription emails are not sent | LPE-1247 |
| In a Message Board thread, it is possible to split the thread at the root message | LPE-1397 |
| Message board threads will not show links for previous and next buttons | LPE-1406 |
| Current category is not shown when moving a message board thread | LPE-1231 |
| Message Boards thread count is incorrect after splitting a thread | LPE-1242 |
| Portlet - Nested Portlets |
| Modifying Nested Portlet's preferences removes all portlets on the page | LPE-1311 |
| Portlet - Quick Note |
| Malicious javascript can be inserted into the quick note portlet | LPE-1245 |
| Portlet - RSS |
| Cannot set a footer Journal / Web Content for RSS portlet | LPE-1350 |
| Portlet - Search |
| Downloading pdf files may result in garbage displayed in the browser | LPE-1187 |
| Search Portlet results for the Image Gallery have incorrect links | LPE-1206 |
| Portlet - Wiki |
| Wiki node deletion will try and remove child pages that have already been removed | LPE-1396 |
| Creating a wiki page with a title larger than 75 characters causes an error | LPE-1222 |
| Cannot add comments to a Wiki page in IE6 | LPE-1232 |
| Wiki pages are sometimes unexpectedly deleted | LPE-1244 |
| Pages are missing from a Wiki's list of children pages | LPE-1264 |
| Cannot attach files to Wiki if the Document Library is configured to allow all file extensions | LPE-1353 |
| Wiki pages will delete itself if you try and move the page to its same name | LPE-1392 |
| Cannot add child pages to Wiki pages with a long title | LPE-1412 |
| Cannot move a Wiki pages with a long title | LPE-1418 |
| The parent Wiki page's data is used to create the child Wiki page | LPE-1449 |
| Search |
| Search does not work after removing a search engine adapter | LPE-1186 |
| Stop words are always removed from search queries | LPE-1185 |
| Lucene search does not work in a clustered environment | LPE-1352 |
| Search may not return results for documents that match the keywords | LPE-1364 |
| Using custom attributes may pollute the search index | LPE-1370 |
| TagLib |
| The Input Date Tag Lib allows invalid dates to be selected | LPE-1482 |
| Missing dividing line between comments | LPE-1270 |
| Themes |
| Update Liferay fav icon | LPE-1260 |
| Upgrade |
| Users are deleted during the verification process | LPE-1300 |
| New framework for upgrading | LPE-1256 |
| Cannot deploy plugins using service builder on WebLogic | LPE-1324 |
| Upgrading a large database is unnecessarily slow - Alter column type | LPE-1343 |
| Upgrading a large database is unnecessarily slow - Update inner join | LPE-1345 |
| Database can now be upgraded from the command line | LPE-1382 |