[
https://issues.apache.org/jira/browse/SOLR-18474?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated SOLR-18474:
----------------------------------
Labels: pull-request-available (was: )
> Restrict plain SolrClientCache usage within Solr for better security
> --------------------------------------------------------------------
>
> Key: SOLR-18474
> URL: https://issues.apache.org/jira/browse/SOLR-18474
> Project: Solr
> Issue Type: Improvement
> Components: Server, streaming expressions
> Reporter: David Smiley
> Assignee: David Smiley
> Priority: Major
> Labels: pull-request-available
> Time Spent: 10m
> Remaining Estimate: 0h
>
> SolrClientCache creates SolrClient instances, and thus presents security
> risks/concerns. This is more pronounced after SOLR-18130. This issue
> proposes that a Solr server only ever use a new subclass of SCC designed for
> use within the Solr server and that which uses the "allow" URL/ZK controls of
> the solr server. It shall furthermore be restricted to SolrCloud. The
> base/plain SCC shall only be used by clients (outside Solr).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
