On 10/26/26 19:00, Jan Høydahl wrote:
Please see the default security.json template that ships with solr and that is activated whenever you activate basicAuth from bin/solr auth command.
So the problem with both solutions is the terrible horrible "blockUnown defaults to false" security hole. Some knee-jerk security professional put it into nessus from where it got into tenalbe, that got me a "medium vulnerability" security fail, which prompted that question.
Thanks everyone Dima
