** Bug
   * [LPS-252] - Content type image/jpg not recognized by IE
   * [LPS-377] - Update socialRequest status don't consider receiverId
   * [LPS-642] - service-ext.properties is not working
   * [LPS-956] - Request parameter without =xxxx in IBM JSF portlet causes ArrayIndexOutOfBoundsException in PortletRequestDispatcherImpl
   * [LPS-965] - Issue while deleting fields in shopping cart portlet
   * [LPS-970] - MailEngine.send() not sending attachments
   * [LPS-973] - Restore archive settings in web proxy portlet not working
   * [LPS-1022] - Communities Portlet - Adding Communities using Symbols and not Chars
   * [LPS-1151] - Shopping portlet-No validation is done when non numberic characters are given for Price and Discount
   * [LPS-1167] - changing openoffice.server.host has no effect
   * [LPS-1280] - Forgot password option asks for answer with no question
   * [LPS-1299] - Deletion of answers in the poll always deletes the last answer
   * [LPS-1324] - Archived list item display number in web proxy portel is not working.
   * [LPS-1360] - UnsupportedOperationException when changing the parent of a wiki page
   * [LPS-1378] - Context xml file should not be copied to domain1/conf directory when appserver = Glassfish.
   * [LPS-1606] - Staging workflow - No User exists with the primary key 0
   * [LPS-1608] - LDAP is not updated when user requests a new password from the 'Forgot Password' functionality.
   * [LPS-1752] - Results of All Articles in KnowledgeBase Portlet are not paginated
   * [LPS-1909] - ResourceResponseImpl may add http headers twice
   * [LPS-1977] - Adding a new wiki page with the same title in different parents causes that the older page dissapears
   * [LPS-1979] - Problems with theme.css.fast.load=true in 5.2
   * [LPS-1989] - Phantom portlets appear to page
   * [LPS-2002] - getArticleDisplay from  JournalArticleLocalServiceImpl ignores templateId
   * [LPS-2024] - Announcements can't be subscribed as Email or SMS
   * [LPS-2046] - Can not access login page,to display "You do not have the roles required to access this portlet."
   * [LPS-2050] - User profil -  update impossible without change password
   * [LPS-2086] - MBStatsUser table doesn't update when posts are deleted
   * [LPS-2093] - Staging with Organization roles won't work
   * [LPS-2099] - Tags Removed When Upgrading to 5.2.0
   * [LPS-2100] - Documents in Document Library No Longer Available After Upgrade to 5.2.1
   * [LPS-2111] - Errors when creating new Users in User Administration
   * [LPS-2115] - Organization role with permission to manage suborganizations can't create suborganizations
   * [LPS-2121] - Deleting thread in MB only deletes first message
   * [LPS-2124] - Web/Journal Content Display that is waiting configuration is only viewable by Onmiadmin
   * [LPS-2145] - Styled navigation.css points to invalid welcome_message.png
   * [LPS-2163] - CalendarUtil does not give correct result on equalsByDay
   * [LPS-2171] - Blog portlet scoping bug
   * [LPS-2172] - Incorrect Region Code for Alberta, Canada
   * [LPS-2176] - guest can view a portlet in an users public page even when guest has no view permission for the portlet, but "user" role  has view permission for the portlet
   * [LPS-2182] - Avoid "Catch 22" situation with LDAP configuration: Credentials are never saved because of crash when using wrong credentials.
   * [LPS-2183] - Fix "ant setup-eclipse" for Plugins SDK
   * [LPS-2186] - DataHandler ClassNotFound during export/import
   * [LPS-2188] - Shared public render parameters are not saved when the portlet changes window state
   * [LPS-2193] - Passwords should not be tracked during LDAP imports
   * [LPS-2195] - Staging permissions do not work with organizations
   * [LPS-2196] - Control Panel does not allow you to export a LAR file.
   * [LPS-2200] - An attacker can insert and execute malicious script
   * [LPS-2202] - Requiered changing password may result in a lost of the organization context
   * [LPS-2203] - Fix Friendly URLs so they work with shared public render parameters
   * [LPS-2206] - Message board category security poorly implemented
   * [LPS-2214] - when editing user roles programatically, the new roles are not indexed
   * [LPS-2218] - Error when creating Location Organizations
   * [LPS-2220] - Bug in searching web contents through the web content display portlet
   * [LPS-2225] - Document Library - You can not add a comment when you try to edit a document.
   * [LPS-2227] - After changing the scope of a portlet, you can no longer add new pages through the "add page" tab
   * [LPS-2228] - Activities portlet ignores permissions
   * [LPS-2235] - Able to create pages with blank names
   * [LPS-2238] - Removing unnecessary paths
   * [LPS-2244] - PortalImpl.getStaticResourceURL concatenating wrong minifierType parameter on JavaScript urls when css_fast_load=0
   * [LPS-2245] - LanguageFilter does not work when VirtualHost is defined
   * [LPS-2246] - Asset Publisher - Cannot Add Comment : "You have entered invalid data. Please try again."
   * [LPS-2249] - Ordering results by score and then by modification date
   * [LPS-2253] - Attempting to add a group to 'User Groups' when editing a user results in exception "Column not found: USERGROUP.NAME"
   * [LPS-2254] - Power User Role rights not propagating properly to users that are assigned via groups rather than direct assignment.
   * [LPS-2266] - Creating structure sometimes shows error when trying to use inheritance
   * [LPS-2268] - Schedular in  Dock-->Staging-->Pubblish to Live does not work
   * [LPS-2270] - ClassNotFoundException: com.sun.portal.wsrp.consumer.common.DeploymentServiceRemoteImpl ...
   * [LPS-2271] - webform portlet does not work on Sun PC
   * [LPS-2272] - Community administrator not able to approve membership requests
   * [LPS-2275] - Links in admin GUI are broken when accessing a community that has a virtual host
   * [LPS-2282] - Custom CSS loaded before theme
   * [LPS-2284] - Broken links for the BlogsAggregator portlet when blog is scoped to a page
   * [LPS-2286] - Caches of web content articles are not hit
   * [LPS-2291] - The 404 page should not use the home URL when a virtual host is being used
   * [LPS-2292] - Link to portlet url is not correctly mapped to layout on import if exported plid does not exist
   * [LPS-2294] - Can't allow community administrators to use their own logo - checkbox javascript error
   * [LPS-2298] - UnmodifiableList needs to be Serializable
   * [LPS-2299] - "hibernate.generate_statistics" was not properly read from portal.properties
   * [LPS-2305] - Improve DB performance by having better transaction boundaries
   * [LPS-2314] - The showListed option in Web Content Search ineffective
   * [LPS-2316] - custom attribute width
   * [LPS-2317] - CalEvent service doesn't handle custom attribute persistence
   * [LPS-2318] - BlogsEntry service doesn't handle custom attribute persistence
   * [LPS-2323] - Phishers can redirect users to an untrusted site
   * [LPS-2325] - MySQL does not allow unique index keys to be created on columns over 255 when using utf-8
   * [LPS-2336] - Error changing email address through hooks
   * [LPS-2339] - Can not add comments.
   * [LPS-2346] - Plugin Installer stops working if an java.lang.Error is thown during portlet deployment
   * [LPS-2347] - Remote Publish does not publish portlets marked as "always exportable"
   * [LPS-2348] - Cachability on ResourceRequest is blank
   * [LPS-2351] - PortletRequestUtil fails if the cachability of the ResourceRequest is not PAGE
   * [LPS-2353] - ThemeDisplay isLifecycleRender returns the wrong value when portlet is not directly accessed
   * [LPS-2356] - viewMode is always null
   * [LPS-2375] - Missing portlet icons maximize, minimize, close in IE6
   * [LPS-2379] - Group finder with parameters companyId, name should always return a unique value
   * [LPS-2385] - Mail Engine does not always return the correct property value
   * [LPS-2387] - POP Notifications does not work in secure mode
   * [LPS-2388] - Company key should not be updated except when it has not been initialized
   * [LPS-2393] - XSS vulnerability in My Communities portlet
   * [LPS-2394] - DropIndexes tries to drop indexes from across all the databases that MySQL is hosting
   * [LPS-2395] - XSS vulnerability in calendar portlet
   * [LPS-2396] - Add new indexes after verification
   * [LPS-2397] - XSS vulnerability in <liferay-portlet:renderURLParams>
   * [LPS-2398] - XSS vulnerability in themes
   * [LPS-2399] - XSS vulnerability with several portal parameters
   * [LPS-2401] - Group_.classNameId, classPK and Role_.classNameId, classPK should always return unique values
   * [LPS-2404] - Configuring the Liferay Message Bus in the Plugins Env via Spring does not switch classloader contexts properly
   * [LPS-2406] - Search: Rating icons laying into two lines
   * [LPS-2407] - Create account : Invalid date of birth validation issue
   * [LPS-2411] - Remove unnecessary duplicate call to getCurrentURL
   * [LPS-2413] - User display tagllib does not close div's correctly
   * [LPS-2417] - Control Panel - Communities Do Not Appear in Drop Down
   * [LPS-2419] - Journal Content don't use default language
   * [LPS-2421] - render_portlet-ext.jsp is included in the wrong spot
   * [LPS-2427] - Organization administrators cannot manage suborganizations that are 2 or more levels deep
   * [LPS-2428] - ConnectionHeartBeatJob not closing statement. Causes maximum open cursors exceed. ORA-01000
   * [LPS-2429] - Asset Publisher generates an error when clicking "View Blog" if the blog entry is not published any where
   * [LPS-2430] - The method getShardId(String, String, String, String) is undefined for the type ShardSelector
   * [LPS-2435] - Admin Control Panel edit user loses user's organization
   * [LPS-2445] - An exception occurred processing JSP page /html/portal/render_portlet.jsp at line 96
   * [LPS-2448] - Asset Publisher Bug in Title field when using extra characters (question marks, etc.)
   * [LPS-2455] - Role User is removed from database table (users_roles) when saving user profile
   * [LPS-2456] - Editing roles in "Default User Associations" in Control Panel appends whitespace to role names.
   * [LPS-2460] - Comments, ratings, tags, and categories are not being exported correctly
   * [LPS-2463] - VerifyUsers takes forever to complete when there are many users
   * [LPS-2465] - When replying to a membership request, the requester's name is displayed incorrectly
   * [LPS-2467] - Should use current time when updating attachments in message board
   * [LPS-2475] - It does not allow you to remove the Permissions for a Guest to View one particular image.
   * [LPS-2476] - When trying to add the Document Library Portlet or the Image Gallery Portlet it does not load until you refresh the page.
   * [LPS-2480] - In 'Document Library' when you try to update the document twice it doesn't update.
   * [LPS-2481] - Service Builder not getting exceptions from *ServiceImpl
   * [LPS-2483] - Exception on any JSON service call
   * [LPS-2503] - Blog with SCOPE has wrong RSS feed connected
   * [LPS-2514] - Cannot create more then two revision of a document in Document Library
   * [LPS-2519] - An organization administrator gets an error when trying to assign an org role to a user of his organizations
   * [LPS-2529] - The Blog portlet's rss feed does not work in a virtual host
   * [LPS-2536] - Asset Publisher - Voting system doesn't work
   * [LPS-2538] - typo in com.liferay.portal.editor.fckeditor.receiver.CommandReceiverFactory
   * [LPS-2539] - Web Content List portlet does not list the articles associated with structures if no structure is selected in the configuration
   * [LPS-2543] - Current URL /web/guest/$my_account_url generates exception: null
   * [LPS-2544] - Group.getDescriptiveName() for a layout returns a XML string
   * [LPS-2545] - Calling PortalUtil.getPlidFromFriendlyURL() doesn't return the plid of the default layout if the friendlyURL passed is that of the layoutSet
   * [LPS-2557] - Recursive permission logic for  folders and categories missed the first folder or category
   * [LPS-2563] - User with Administrator role does not see suborganizations in the Control Panel navigator
   * [LPS-2566] - XSS vulnerability in Liferay.currentURL
   * [LPS-2573] - Asset Publisher does not increment view count
   * [LPS-2578] - Bug with page permissions
   * [LPS-2579] - Blogs aggregator error to display blog content when SCOPE is used
   * [LPS-2580] - Blog Aggregator: when SCOPE is used, and BODY is shown, error on comments link
   * [LPS-2587] - Batch operations don't work properly
   * [LPS-2589] - Exporting web content or wiki pages to PDF, DOC, ... does not include images correctly
   * [LPS-2594] - Class loading problems for the portlet-layout-listener-class element
   * [LPS-2604] - Control panel no longer lists all properties for My Account
   * [LPS-2611] - Adding user using JSON service don't accept organizationIds
   * [LPS-2617] - Disabling gender does not hide gender option when creating new account
   * [LPS-2621] - Hooks did not read case sensitive property names
   * [LPS-2624] - loose content when delete any repeating field from webcontent. Webcontent form resets itself to empty fields and deletes all repeating fields from the webcontent form.
   * [LPS-2640] - Viewing an IG image should update the asset's view count
   * [LPS-2641] - Missing Images not handled properly
   * [LPS-2642] - ampersand validation errors caused by the script and css compressor
   * [LPS-2644] - companylogo url uses unencoded ampersand
   * [LPS-2646] - Default value of costum attribute of type 'Boolean' is not taken
   * [LPS-2650] - Visiting a bookmark in Asset Publisher does not increment visit count
   * [LPS-2652] - URL can only be invoked using POST Errors
   * [LPS-2657] - Should add a check on whether all the sql statements are commented out before running them in DB2Util
   * [LPS-2658] - ClassCastException when casting a com.liferay.portal.kernel.xml.Node to an Element, even though it is an instance of Element
   * [LPS-2661] - ServiceComponent fails on portlet with service.xml
   * [LPS-2671] - PortletImpl clone did not accurately clone the object
   * [LPS-2672] - in control panel, delete a communitiy that you are currently accessing ,will get error messages
   * [LPS-2673] - Alerts portlet does not show alerts to normal users
   * [LPS-2674] - Assigning a user to a usergroup with web pages may cause errors
   * [LPS-2679] - Asset Publiser - Image Gallery - "Back" link does not work
   * [LPS-2682] - Prevent duplicate resource and resource code exceptions
   * [LPS-2684] - "index.read.only" is not honored properly
   * [LPS-2685] - Selecting a Users UserGroups via the control pannel fails for company admin users
   * [LPS-2694] - Image Gallery: don't display tab "My Images" for other users
   * [LPS-2698] - problem with Document Library versionning
   * [LPS-2701] - Virtual Hosting tests not properly modularized, causing test breakage.
   * [LPS-2709] - You cannot view the images in the 'Image Gallery' portlet.
   * [LPS-2710] - Marking an alert as read does not work correctly
   * [LPS-2712] - Struts PropertyMessageResources locks under high load
   * [LPS-2714] - Can't get outside theme to be used as default
   * [LPS-2717] - Wiki Portlet: Error when you name a Child Page with the same name as the Parent
   * [LPS-2722] - Asset Publisher: Order By Doesn't Order Blogs Properly If "Publish Date" is Chosen
   * [LPS-2724] - Asset Publisher configuration doesn't save the metafields correcty when using manual asset selection
   * [LPS-2725] - Permissions not persisting correctly in portlets
   * [LPS-2726] - InitialThreadLocal did not properly use the constructor's value as a prototype
   * [LPS-2732] - DB2 error while upgrading v5_1_5.UpgradeTags
   * [LPS-2738] - Forgot password functionality does not set other user password properties, breaking LDAP export
   * [LPS-2739] - Improve Sprite generation for IE6 by generating Sprites as GIFs for IE6
   * [LPS-2743] - CacheFilter generates wrong cache keys
   * [LPS-2752] - Flags taglib did not escape content, causing JS errors
   * [LPS-2753] - Wrong data into Region table for country Italy
   * [LPS-2755] - LDAP export fails when importing a user from LDAP
   * [LPS-2758] - Read / Write DB Split needs to align better with transactional boundaries
   * [LPS-2760] - LDAP import stops if there is an issue updating a user
   * [LPS-2763] - Web content search links for some articles do not work
   * [LPS-2770] - Old versions of Journal Article looses it's tags if new version is deleted
   * [LPS-2771] - Saving new unapproved version of Article makes old approved version disappear
   * [LPS-2772] - Error appears during copying page with Polls portlet from Live to Staging.
   * [LPS-2778] - Resource code cache key can be wrong if name is a number
   * [LPS-2779] - Merging pages with the Guest community works intermittently
   * [LPS-2780] - Portlets -> look and feel -> reset should reset the text boxes
   * [LPS-2790] - Verification would run every other start up even though verified
   * [LPS-2794] - Excessive garbage creation in the MBMessageLocalServiceImpl.getMessageDisplay()
   * [LPS-2797] - Navigation issue in Server Administration -> Properties tab
   * [LPS-2800] - An exception during verify process could cause indexer to never return from readOnly state
   * [LPS-2803] - ResourceActionsUtil.getPortletResourceActions() causes NPE if a portlet does not exist
   * [LPS-2812] - Wiki Creole link does not work
   * [LPS-2813] - Length check for String in Base64.decode
   * [LPS-2824] - Unable to change organization specific permissions in the control panel
   * [LPS-2825] - Wiki displays incorrect UI error msg and also throws wrong exception
   * [LPS-2828] - PluginPackageUtil throws StringIndexOutOfBoundException if module version is missing in the war name
   * [LPS-2829] - NoSuchFolderException appears during exporting community with at least one page containing Document Library Display portlet
   * [LPS-2831] - Immage Gallery breaks if image description contains newlines.
   * [LPS-2836] - using "reference" element in plugin's service.xml to refer to portal services generates code properly but fails to load with exceptions on deploy
   * [LPS-2838] - Upgrading services generated by service builder requires presence of portlet-model-hints-ext.xml
   * [LPS-2839] - expiration-cache breaks JSR-286 inter portlet communication
   * [LPS-2842] - CompanyImpl for Sharded Databases do not retrieve proper Account data
   * [LPS-2843] - High load on social comment feature leads to potential for concurrent data insertions
   * [LPS-2846] - RSS Portlet does not show Atom 1.0 feed
   * [LPS-2859] - WSDD generation broken because of UnicodeProperties
   * [LPS-2860] - XSS vulnerability in status page because of bad url
   * [LPS-2870] - CLONE -Can't allow community administrators to use their own logo - checkbox javascript error
   * [LPS-2878] - isIndexReadOnly changes not taking effect
   * [LPS-2880] - Importing a Wiki Page that has been deleted and rewritten will cause duplicate page errors
   * [LPS-2881] - Access to a restricted community virtualhost is not handled properly
   * [LPS-2887] - You can not add a Web Content article.
   * [LPS-2888] - Child Wiki Pages with page names alphabetically earlier than their parent Wiki Pages will not import correctly
   * [LPS-2889] - WikiPortletDataHandlerImpl.java compilation error
   * [LPS-2892] - User administration throws runtime exception and is not functioning
   * [LPS-2900] - Firefox (and other browsers) will only show the scrollbar when needed
   * [LPS-2901] - Feed clients don't recognize when a BlogEntry is updated and show duplicates
   * [LPS-2903] - Chat portlet - compiling error
   * [LPS-2905] - Web Form Plugin is not redirecting on success
   * [LPS-2920] - create a journal conent with page type as article, and type article id while staging. After you publish to live the artile id is null
   * [LPS-2922] - Ensure ConvertProcess supports shards
   * [LPS-2930] - XSS escaping is too aggressive
   * [LPS-2945] - Not included portles are shown in the Add Application Menu
   * [LPS-2949] - Add a new method getWARThemes to ThemeService which can be accessed by external tools.
   * [LPS-2950] - JSONServiceAction.java 's getJSON() doesn't return proper JSON String when the return type of the method is JSONArray
   * [LPS-2955] - Unable to view Portal Properties in Admin Portlet after first page.
   * [LPS-2956] - JMX statistics for destinations do not report the proper pending message count
   * [LPS-2971] - Portlet's name with ' and manage pages
   * [LPS-2988] - V 5.2.2  for vista 64bit IE8 GA JS ERROR
   * [LPS-2994] - When a new page is created with "Copy parent" checked the portlets are copied but the preferences are not
   * [LPS-2996] - Weather portlet images not showing up
   * [LPS-3004] - You can't edit / delete / post reply to comments.
   * [LPS-3005] - Chat Portlet Does Not Compile
   * [LPS-3007] - Non-Power Users are still able to see "My Community" after "layouts.power.user.required" values are set to true
   * [LPS-3012] - After ticking use small image checkbox in a journal article export doesn't work it cause NullPointerException
   * [LPS-3016] - Error in UpgradeTags.java in upgrading process to 5.2.3
   * [LPS-3024] - Remove redundant admin portlet in struts-config.xml
   * [LPS-3025] - When edditing layout templates you can end up with stranded/inaccessible portlets
   * [LPS-3031] - Tag name is not validated when added
   * [LPS-3035] - Export/Import Community Causes Errors
   * [LPS-3040] - update: portlet / type settings / meta-...
   * [LPS-3041] - javascript theme bug under linux
   * [LPS-3043] - ClassNotFoundException after hot deploy of plugins when other plugins or ext reference it's service interfaces.
   * [LPS-3048] - The Wiki LAR Files can not be imported immediately
   * [LPS-3061] - File Uploader no longer responds after files are selected
   * [LPS-3064] - Blogs LAR Does Not Import Comments
   * [LPS-3073] - Asset Publisher CSS should be moved to css.jsp
   * [LPS-3075] - Cache filter incorrectly caches log in requests
   * [LPS-3083] - Bitwise permissions ignores owner role
   * [LPS-3084] - Wiki Search Returns No Results
   * [LPS-3099] - Request parameter values are duplicated when virtual hosts are used
   * [LPS-3105] - Web content link to layout structure element may not show the first page in a community
   * [LPS-3106] - The 'My Documents' and 'Recent Documents' tabs do not display anything in the 'Document Library' portlet.
   * [LPS-3115] - Blocking cache never released in some circumstances
   * [LPS-3117] - Ranks are not shown in Message Boards
   * [LPS-3119] - Cannot delete communities that have web content.
   * [LPS-3120] - Searching users in control panel with Solr installed doesn't work
   * [LPS-3130] - ExpandoTableLocalServiceUtil.deleteTable() leaks ExpandoRow entries
   * [LPS-3134] - Google gadget portlet does not work due to Google pages changes
   * [LPS-3136] - Custom reminder queries do not work at "forgot password"
   * [LPS-3141] - could not import the ics file generated by MS Outlook server because it had tab char for line break
   * [LPS-3145] - org.postgresql.util.PSQLException: ERROR: column "remindby" cannot be cast to type "pg_catalog.int4"
   * [LPS-3147] - You Can Not View Users from User Groups.
   * [LPS-3152] - XSS vulnerability in custom attributes
   * [LPS-3155] - XSS vulnerability with organization names
   * [LPS-3159] - Custom Attribute never shown to Guest with VIEW granted
   * [LPS-3160] - Enable assigning UPDATE to Guest for Custom Attributes
   * [LPS-3162] - Exception is thrown when Guest accesses a selection list Custom Attribute
   * [LPS-3165] - Arbitrary System-Level File Access
   * [LPS-3173] - JournalArticle urlTitle does not take into different versions
   * [LPS-3175] - Create of unique index fails if there is duplicate data
   * [LPS-3176] - XSS vulnerability in password policies
   * [LPS-3177] - XSS vulnerability with role names
   * [LPS-3178] - XSS vulnerability in Mange Pages
   * [LPS-3187] - Problems with I18nServlet and organizations.
   * [LPS-3193] - When setting the permissions for a resource the permissions inherited from scopes group, group template and community are not shown
   * [LPS-3209] - after publish article to live from staging, journal content search portlet can not hit the content of jounral article
   * [LPS-3215] - The solution to LPS-2286 caused a regression forcing JournalContentUtil to have a dependency on ThemeDisplay
   * [LPS-3219] - Missing language key in Blogs Configuration
   * [LPS-3220] - XSS vulnerability in Shopping portlet
   * [LPS-3228] - UpgradeLayout throws SQLException when upgrading Microsoft SQL Server to v5_0_0
   * [LPS-3229] - UpgradeDocumentLibrary throws SQLException when upgrading Microsoft SQL Server to v5_1_5
   * [LPS-3230] - Document Library Display Portlet may change the HTML title
   * [LPS-3231] - Modifications to system column in Company table and related services causes UpgradeProcesses to fail for 5.1.x to 5.2.x
   * [LPS-3232] - Directory Portlet throws exception when trying to view users of a usergroup
   * [LPS-3233] - Track viewed threads by thread instead of by message via MBMessageFlag
   * [LPS-3234] - UpgradeMessageBoards throws SQLException when upgrading Microsoft SQL Server to v5_1_5
   * [LPS-3235] - Missing language keys
   * [LPS-3241] - Portal does not always properly render virtual host urls
   * [LPS-3245] - Hello World portlet did not close writer
   * [LPS-3247] - Document Library Display uses same columns for folders and documents
   * [LPS-3249] - Publishing a workflow proposal should not show options for scheduling
   * [LPS-3265] - Blogs portlet does not load until you refresh the page
   * [LPS-3270] - Get rid of InvokerSimpleAction instantiation on the HookHotDeployListener.initEvent method
   * [LPS-3275] - ORA-01719 Error in message boards queries
   * [LPS-3276] - Journal article call picture inside of document library portlet cause Orm exception
   * [LPS-3281] - Regular users should not see the Content menu in the Control Panel if they don't have permissions to manage content
   * [LPS-3282] - Nested portlet does not work in 5.2.x. and 5.1.x
   * [LPS-3283] - Workflow portlet cannot save definitions
   * [LPS-3285] - User cannot access auth.public.paths if he doesn't have a private community
   * [LPS-3286] - XSS vulnerability in <title> and <meta> tags
   * [LPS-3310] - Forgot password captcha can be circumvented
   * [LPS-3312] - My posts in Message boards is not ordered correctly
   * [LPS-3314] - Ensure that thread local caches are cleared for every thread
   * [LPS-3319] - clpMessageListenerClass can not load class
   * [LPS-3323] - Guests should never have the View permission by default for contents created through private pages
   * [LPS-3324] - Export calendar events can sometimes be triggered by a crawler that should allow a get and not require a post
   * [LPS-3330] - PersistenceImpl caching the wrong object in fetch methods
   * [LPS-3333] - UserLocalServiceImpl - trim and toLowerCase ineffective on user fields (Strings are immutable)
   * [LPS-3352] - Sprite generator does not release open images files, and causes too many open files on repeated deployments of themes.
   * [LPS-3355] - Unable to manage content in control panel if user is not assigned to any organizations
   * [LPS-3357] - PersistenceImpl throws null pointer for Date fields that are also part of unique finders
   * [LPS-3358] - Clear finder and entity caches on redeploy of plugins
   * [LPS-3374] - Copy Page selection entries are over-eagerly escaped
   * [LPS-3375] - Article selection doesn't account for (can't see) Staging community
   * [LPS-3377] - StagingUtil should stream whenever possible
   * [LPS-3378] - Poller processor is using wrong class loader for plugins
   * [LPS-3391] - Wiki: Recent Changes feed links don't work
   * [LPS-3399] - Calendar portlet does not cleanup temp files after export/import of events
   * [LPS-3408] - WAR does not have ccpp.jar
   * [LPS-3409] - Blogs Trackback should not require post
   * [LPS-3410] - SB Plugin's table upgrade logic doesn't support added columns
   * [LPS-3412] - Can't use the XStream support in LAR framework from plugins due to classloader restrictions
   * [LPS-3413] - LAR Export throws exception and fails because NoSuchDiscussionException is thrown
   * [LPS-3415] - LAR Export doesn't handle PERMISSIONS_USER_CHECK_ALGORITHM == 6
   * [LPS-3416] - Adding additional addresses shows an ugly error message (that can be ignored)
   * [LPS-3418] - SearchPermissionChecker doesn't handle PERMISSIONS_USER_CHECK_ALGORITHM == 6
   * [LPS-3419] - Certain portlets can cause the LAR export to fail.
   * [LPS-3420] - Automatically exporting Journal to LAR is not always the desired behavior
   * [LPS-3433] - Adding DelayedTask so that Javascript can easily stagger a function
   * [LPS-3446] - layout edit page generates javascript error
   * [LPS-3545] - All Organisations not available in My Places for a Member User


** Improvement
   * [LPS-366] - An attacker can enter and execute malicious scripts in application
   * [LPS-447] - Content portlets should not be shown even if the user has "add portlet" permission
   * [LPS-523] - Asset Publisher: Add Configuration Option To Show Or Hide Tags
   * [LPS-1934] - Support hiding from user management the sections for roles and other associations even if they are assigned somewhere else
   * [LPS-2191] - Modify readme.html to point to new documentation page
   * [LPS-2217] - Add Germany's regions to the database out of the box
   * [LPS-2226] - Minor improvements for the Discussion taglib
   * [LPS-2239] - Minor fixes for the Wiki taglib section
   * [LPS-2243] - Minor fixes for the Web Content Display taglib section
   * [LPS-2251] - ant build-ext should sync portal/lib and ext/lib folder
   * [LPS-2277] - Global "Class" variable causes conflicts with 3rd party libraries
   * [LPS-2290] - When accessing the root URL of a community with a virtual host it should always go to the front page
   * [LPS-2303] - Add upgrade-ext target to allow users to upgrade from an ext environment
   * [LPS-2304] - Allow arbitratry params to the index user search queries
   * [LPS-2310] - Create unique indexes to speed up performance
   * [LPS-2320] - Make the default for expandoBridge.isIndexEnabled smarter
   * [LPS-2327] - Drop old indexes for better performance, and also allows better indexes with the same name to be used
   * [LPS-2329] - ORM / Hibernate wrapper needs to expose setCacheable
   * [LPS-2340] - Should be able to control how many entires are automatically expanded in RSS portlet
   * [LPS-2355] - Springify JournalContentUtil
   * [LPS-2357] - New method to PortalSessionContext
   * [LPS-2359] - The ordering of CSS and Javascript files by top_head.jsp needs to be standardized
   * [LPS-2363] - Updated german translation for 5.2.2
   * [LPS-2366] - Add Italian regions to the database out of the box
   * [LPS-2377] - Upgrade to Jackrabbit 1.5.3 because of bug fixes and improved text extraction
   * [LPS-2378] - Use java.util.UUID instead of JUG
   * [LPS-2380] - Removing unnecessary "lower" in sql query improves performance
   * [LPS-2381] - *ServiceImpl.is* should not be wrapped with a tx for better performance
   * [LPS-2383] - Additional role checking method available in UserService
   * [LPS-2408] - FinderCache keys are longer than they need to be
   * [LPS-2410] - Create friendlier methods for ClassNameService
   * [LPS-2412] - Refactor StartupAction to move logic into utility class
   * [LPS-2415] - MailMessage needs friendlier setters for to, cc, and bcc to accept non array addresses
   * [LPS-2418] - Improve startup time by 20% for servers connecting to a network database
   * [LPS-2420] - Cache system roles and groups because they can never be modified
   * [LPS-2426] - Add re-usable 'extendList' method to AbstractModelExtensionHandler
   * [LPS-2431] - Blogs Aggregator should be able to show a blog entry itself if it's not published anywhere else
   * [LPS-2433] - Mkae PortalUtil.getPlidFromPortletId smarter
   * [LPS-2439] - Streamline calls to get Users, Groups, Roles, and User Groups by companyId and name
   * [LPS-2440] - Improve manual usage of FinderCache
   * [LPS-2442] - Add indexer to Calendar
   * [LPS-2444] - InitialThreadLocal as a helper class that is a ThreadLocal that takes in an initialValue in the constructor
   * [LPS-2458] - LAR import fails if categories-hierarchy.xml is not found
   * [LPS-2464] - Eliminate the need for *ServiceJSON classes
   * [LPS-2470] - Support different configurations for the form of User Administration and My Account.
   * [LPS-2472] - Better default names for staging for Organizations and Users
   * [LPS-2485] - Dropping indexes should happen right before adding new indexes
   * [LPS-2488] - When clicking on MB Category in search results, you should go to the category
   * [LPS-2489] - Added remove() methods to ArrayUtil
   * [LPS-2492] - Improve the "Portlet Not Setup Page"
   * [LPS-2498] - Make "/-/" point to a constant called Portal.FRIENDLY_URL_SEPARATOR
   * [LPS-2499] - widget.js should generate iframe with id
   * [LPS-2501] - Change Message Board thread searching to be more obvious about scope
   * [LPS-2507] - MBThreadFinder.findByGroupId has unnecessary join
   * [LPS-2509] - DBUtil.DB_TYPE_* should be DBUtil.TYPE_
   * [LPS-2510] - DBUtil.isSupportsAlterColumnName and isSupportsAlterColumnType
   * [LPS-2511] - Speed up upgrade process for databases that support altering the column type (db2 does not)
   * [LPS-2513] - Sample Action that ensures all requests are HTTPS
   * [LPS-2523] - Add ability to change max file sizes through the gui
   * [LPS-2526] - PortalUtil.getCurrentCompleteURL
   * [LPS-2531] - MBCategory should store thread and message count
   * [LPS-2533] - Add groupId to MBMessage and MBThread for better performance
   * [LPS-2554] - Remove unnecessary Message Boards transactions
   * [LPS-2555] - Optimize number of calls in Message Boards that are used to check if a user is subscribed to a category or thread
   * [LPS-2556] - Optimize the number of calls to check if a Message Board thread has been read or not
   * [LPS-2558] - Remove unused methods in MBMessageDisplay
   * [LPS-2559] - BaseModel should allow generics
   * [LPS-2562] - Improve performance of displaying Message Boards Categories
   * [LPS-2570] - Allow for Office 2008 file extensions by default in doc lib
   * [LPS-2572] - Expose "default.landing.page.path" to hooks
   * [LPS-2574] - TagsAsset SQL for plugins
   * [LPS-2592] - Allow searching by groupId
   * [LPS-2593] - Disable document conversion cache in developer mode
   * [LPS-2598] - Provide a more highly optimized data entry method for ExandoValue
   * [LPS-2599] - Wrap verify in BatchSession
   * [LPS-2602] - Don't show "I Agree" button in "Terms of Use" if user has already agreed.
   * [LPS-2603] - Add "toggleSelectBox" helper method to util.js
   * [LPS-2609] - Refactor ratings so that it can be easily used from any portlet
   * [LPS-2614] - Add better indexes for Group_
   * [LPS-2616] - MySQL sql selects are case insensitive by default, so do not use "lower(" function
   * [LPS-2619] - Allow for more overrides in hooks
   * [LPS-2626] - Increase performance of adding permissions
   * [LPS-2631] - Allow new users to specify password on signup
   * [LPS-2634] - Remove uuid.jar
   * [LPS-2639] - Bookmark/DL asset view count should equals the bookmark's visit count / DL download count
   * [LPS-2660] - Improve caching of entities
   * [LPS-2669] - Remove unnecessary join when counting Roles_Permissions
   * [LPS-2670] - Remove unnecessary SQL calls in AdvancedPermissionChecker
   * [LPS-2683] - Create sample MemoryCacheManager for people who want to implement their own cache managers
   * [LPS-2686] - Remove usage of InitializingBean where it's not needed
   * [LPS-2687] - Enable the spring capabilities of ServiceBuilder enabled plugins to be used from non-ServiceBuilder using plugins
   * [LPS-2699] - Improve debug logging during "Test LDAP User" user setup
   * [LPS-2700] - Entity Cache and Finder Cache should use Ehcache's BlockingCache for better performance
   * [LPS-2705] - Reduce hits to underlying cache for EntityCache and FinderCache by providing a thread local cache
   * [LPS-2706] - Upgrade to commons collections 3.2.1
   * [LPS-2707] - Remove extraneous warnings when fetching a portlet with portlet id of ""
   * [LPS-2711] - Better default c3po settings
   * [LPS-2742] - Allow for tag based navigation when Asset Publisher is in manual mode
   * [LPS-2744] - Add french regions
   * [LPS-2751] - Upgrade to Ehcache 1.6 B3 because it's about 80 times faster than 1.5.0.
   * [LPS-2754] - Improved visual cue when missing LDAP password
   * [LPS-2756] - Improve documentation for the property "index.on.startup"
   * [LPS-2757] - GroupLocalSevice.getNoLayoutsGroups method to grab groups that do not have any layouts
   * [LPS-2761] - Refactor VerifyWikiCreole to be a ConvertWikiCreole that can be invoked from admin portlet
   * [LPS-2762] - Space issues for account creation/login
   * [LPS-2777] - Message Boards message posts pagination in "flat" view
   * [LPS-2782] - Apply urlTitle pattern to Web Content
   * [LPS-2783] - Upgrade to Commons Math 1.2
   * [LPS-2784] - MathUtil to provide fast log base 2 calculations
   * [LPS-2785] - Cache resource code on startup for faster performance
   * [LPS-2786] - ResourceActionsUtil was passing in unnecessary company id to fetch actions
   * [LPS-2787] - PermissionServiceImpl.checkPermission should take in long primKey
   * [LPS-2788] - PermissionLocalServiceImpl.hasUserPermissions should take in a name that relates to the resource id
   * [LPS-2793] - Security Algorithm 6, bitwise based permission scheme
   * [LPS-2798] - JSONServiceAction should handle more exceptions, and also be smart enough to guess the serialization strategy by the return type
   * [LPS-2806] - Make use of the friendly URL separator consistent in JSPs
   * [LPS-2808] - Page keywords, description, title, and sibtitle catenated with existing value by BLANK instead of SPACE, also, as much as possible, only add unique keywords so as to reduce size
   * [LPS-2817] - Improve isNull method in Validator
   * [LPS-2822] - Swedish language, some new text and some polish
   * [LPS-2844] - Improve *ModelImpl setter logic
   * [LPS-2854] - Make pinging google on new BlogEntry an option
   * [LPS-2857] - Classic theme dropdown menu for first level children
   * [LPS-2858] - Remove unused *ServiceFactory classes that were already deprecated in 5.1.x
   * [LPS-2861] - Performance optimization in PortalInstances
   * [LPS-2864] - Tighten up dependency object creation for assets
   * [LPS-2865] - Cleaning up tag libs and repetitive empty string checks
   * [LPS-2866] - Lowering message bus' default thread allocation for parallel destinations
   * [LPS-2868] - Remove unnecessary code in creating of url title for a blog entry
   * [LPS-2886] - Add a previous and next button to blogs for easier navigation in detail view
   * [LPS-2904] - Improvements in iFrame Portlet
   * [LPS-2913] - New transaction definition level "portal" that reads it from portal.properties
   * [LPS-2918] - Add support to specify dynamic parameters for iframe portlet
   * [LPS-2932] - Allow the disabling of result count in search container
   * [LPS-2934] - Adding more report formats and improving report engine integration
   * [LPS-2940] - Social indexes were not unique
   * [LPS-2941] - Upgrade to ehcache 1.6 B4
   * [LPS-2944] - Change "lucene.optimize.interval" default setting to 100 for better write performance
   * [LPS-2952] - Giving feedback to the user when there is an error on reporting abuse
   * [LPS-2953] - Confusing UI when creating location organizations
   * [LPS-2954] - Support internationalization of the title of system roles
   * [LPS-2963] - Cache registry needs method to allow clearing of specific registry / cache name
   * [LPS-2965] - ServiceBuilder convention for hierarchical tree data
   * [LPS-2966] - Organization should use hierarchical tree for better performance
   * [LPS-2967] - Pagination for Edit Permissions UI
   * [LPS-2968] - Speed up upgrade of tags for databases that support updating with inner joins
   * [LPS-2969] - Denormalize User_ and Contact_ table for faster speed in querying users
   * [LPS-2970] - Missing index for Group_(companyId, classNameId, liveGroupId, name)
   * [LPS-2974] - Move Document Library constans out of portal-impl
   * [LPS-2975] - Remove unnecessary  joins in Message Boards
   * [LPS-2976] - Properly forward 404 errors
   * [LPS-2986] - Allow users to create a new wiki page after doing a search
   * [LPS-2987] - Setting log4j level should also set jdk logging level
   * [LPS-2989] - Improve speed for retrieving message  boards recent posts
   * [LPS-2991] - Improve speed for retrieving message boards flag
   * [LPS-2995] - Blogs comments pagination
   * [LPS-2998] - Paginate items when indexing
   * [LPS-2999] - Improve ExpandoBridge indexer logic
   * [LPS-3000] - Populate the new User_ columns with the correct data
   * [LPS-3006] - Update tags asset after tags entries are set
   * [LPS-3013] - ServiceBuilder reIndex should not create a new tx
   * [LPS-3015] - IGImage needs groupId for faster performance
   * [LPS-3017] - WikiPage should have groupId to speed up queries
   * [LPS-3020] - Add groupId to Document Library objects for faster query performance
   * [LPS-3021] - Add classNameId and classPK to MBMessage to remove extra join when viewing comments
   * [LPS-3023] - Add subtype for managing autogenerated roles
   * [LPS-3038] - Add "Back" button to Directory portlet.
   * [LPS-3050] - correcting logging for ArrayDispatcherDestination and IteratorDispatcherDestination
   * [LPS-3051] - OrganizationPermission should take an Organization object as a parameter
   * [LPS-3060] - Add ratings to wiki pages
   * [LPS-3067] - Plugins can choose to disable auto upgrade of ServiceBuilder  generated tables
   * [LPS-3068] - No way to access WCM configuration screen
   * [LPS-3071] - Consolidate permission algorithm 6 to just one table
   * [LPS-3076] - Add service method to get roles by type and subtype
   * [LPS-3080] - Migration code for legacy permissions to Bitwise
   * [LPS-3086] - Allow upgrade Table code to specify custom select SQL
   * [LPS-3090] - Custom SecurityManager for debugging purposes
   * [LPS-3093] - Usability improvements for user management
   * [LPS-3100] - BaseFilter should allow subclasses to throw ServletException in the init method
   * [LPS-3111] - Upgrade scripts should call runSQL when possible
   * [LPS-3112] - Speed up SQL call for MBThread by adding index
   * [LPS-3113] - Alter CalEvent remindBy to int to speed up queries
   * [LPS-3118] - Allow Message Boards Moderators to have a Rank
   * [LPS-3128] - Add ResourceActionsUtil.getResourceActions() and getResourceCommunityDefaultActions() helper methods
   * [LPS-3129] - Improve speed of ExpandoTableLocalServiceUtil.deleteTable()
   * [LPS-3131] - Accessor for getting ExpandoValue without traversing all ExpandoTables
   * [LPS-3138] - ServiceBase should have easy access to clearCache for models and to run native sql
   * [LPS-3143] - Remove unnecessary joins in using Expando to drastically speed up performance
   * [LPS-3148] - Logout test needed for simple testing.
   * [LPS-3150] - Add property to print out full thread dump on shutdown
   * [LPS-3167] - Ant tasks to automate database upgrade tests
   * [LPS-3170] - Remove unnecessary index from Expando
   * [LPS-3171] - Remove unnecessary index from Social
   * [LPS-3174] - Add build property to copy extra jdbc drivers from a certain dir on deploy
   * [LPS-3180] - Deprecate usage of MBMessageFlag to keep track of which messages a user has read since UI never uses it
   * [LPS-3195] - Improve the functionality of Web Content through the Atom Publishing Protocol
   * [LPS-3197] - Make returning to the main entries view from a single entry cleaner
   * [LPS-3199] - Allow for the use of image maps in tinymce
   * [LPS-3200] - Make events processor more robust
   * [LPS-3208] - Direct link to define the permissions of a role
   * [LPS-3212] - Usability improvements for role management
   * [LPS-3222] - Add framework to implement SOS-88
   * [LPS-3254] - Automated tests for SQL Server 2005
   * [LPS-3262] - Tests should default to Tomcat 6.0 instead of Tomcat 5.5 since it is now the recommended one by Apache
   * [LPS-3266] - Test environment needs location of legacy zip files
   * [LPS-3271] - Allow Communities to be tagged.
   * [LPS-3272] - Allow Organizations to be tagged.
   * [LPS-3293] - Allow DBUtil to receive connection for executing sql.
   * [LPS-3295] - Make Tuple serializable
   * [LPS-3299] - Change attribute name for id in html tag "a"
   * [LPS-3309] - Automated tests for PostgreSQL
   * [LPS-3325] - Show User's twitter account if specified in WOL.
   * [LPS-3334] - Synchronous Messaging
   * [LPS-3335] - Broadcast an event upon completion of staging
   * [LPS-3340] - Support Object[] and Object[][] as return type for remote services
   * [LPS-3341] - Add support for two dimensional primitive arrays as JSON service method argument
   * [LPS-3354] - HttpUtil should allow authenticated posts
   * [LPS-3356] - Validator.equals should take in Object instead of just String
   * [LPS-3360] - Improving Chat Portlet
   * [LPS-3371] - Message boards should have a permalink
   * [LPS-3373] - Configure an optional query string for a Layout
   * [LPS-3401] - Poller Processor should split up into two modes, send and receive
   * [LPS-3402] - Make Announcements Portlet components easily hookable.
   * [LPS-3403] - Give Activity Interpreters additional commands in the body
   * [LPS-3422] - Consolidating Dynamic Selects Javascript service calls to one location
   * [LPS-3650] - CLONE -Transparent company logo with white elements displays 'invisible' in control panel theme in community settings

** New Feature
   * [LPS-9] - Reintroduce instance specific properties and make it configurable
   * [LPS-185] - Journal Articles Portlet should also provide option to display all approved articles of a particular structure
   * [LPS-420] - Add the ability to deploy portlets as Google Gadgets
   * [LPS-449] - Support for exporting portlets to Netvibes
   * [LPS-496] - Portal does not alllow setting header as defined by Portlet spec 2.0
   * [LPS-2125] - When entering an invalid page in the wiki, an option should be present to create the page
   * [LPS-2181] - Added translation to Slovak
   * [LPS-2337] - Add support to flag content as inappropriate (report abuse)
   * [LPS-2361] - Sharded Portal Instances
   * [LPS-2382] - Simple and standardized mechanism to seamlessly replace the entities returned by a given service with a custom implementation
   * [LPS-2390] - Allow users to configure Mail server from Admin
   * [LPS-2450] - Asset Publisher should have the SCOPE function
   * [LPS-2876] - Preview for Announcements/Alerts
   * [LPS-2914] - Support for Theme Preview Page that would be used by the Dreamweaver Theme Plugin
   * [LPS-3082] - Support detection of JSR 301 bridge implementations as JSF portlets
   * [LPS-3091] - Add function to create new filename from FileUtil
   * [LPS-3133] - Ability to skip addition of resources under data migration scenarios
   * [LPS-3181] - Add ability to detect at runtime whether a database supports case sensitive text search
   * [LPS-3244] - Add ability to create community templates
   * [LPS-3248] - Support for updating indexes for Oracle
   * [LPS-3267] - ConfigurationAction needs access to resource lifecycle
   * [LPS-3279] - Poller processor that can be used by individual portlets
   * [LPS-3289] - Support for updating indexes for PostgreSQL
   * [LPS-3290] - Poller Javascript allows multiple portlets to use 1 connection
   * [LPS-2897] - Issue with the Announcemnet portlet, Unable to manage the entry if there is more than 20 entries