[ 
https://issues.apache.org/jira/browse/SOLR-7125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14326530#comment-14326530
 ] 

Mark Miller commented on SOLR-7125:
-----------------------------------

We have to consider security here just like the other pass config over http 
right?

Can a user send in an XSLT file to try and escalate from Solr client access to 
full machine access?

> Allow clients to upload/download configs via CloudSolrClient
> ------------------------------------------------------------
>
>                 Key: SOLR-7125
>                 URL: https://issues.apache.org/jira/browse/SOLR-7125
>             Project: Solr
>          Issue Type: Improvement
>            Reporter: Alan Woodward
>            Assignee: Alan Woodward
>            Priority: Minor
>             Fix For: 5.1
>
>         Attachments: SOLR-7125.patch
>
>
> Adding new configs to ZK is still something of a pain point.  We should add 
> some helper methods to CloudSolrClient that make this easier.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org

Reply via email to