David Smiley created SOLR-18474:
-----------------------------------
Summary: Restrict plain SolrClientCache usage within Solr for
better security
Key: SOLR-18474
URL: https://issues.apache.org/jira/browse/SOLR-18474
Project: Solr
Issue Type: Improvement
Components: Server, streaming expressions
Reporter: David Smiley
Assignee: David Smiley
SolrClientCache creates SolrClient instances, and thus presents security
risks/concerns. This is more pronounced after SOLR-18130. This issue proposes
that a Solr server only ever use a new subclass of SCC designed for use within
the Solr server and that which uses the "allow" URL/ZK controls of the solr
server. It shall furthermore be restricted to SolrCloud. The base/plain SCC
shall only be used by clients (outside Solr).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
