[
https://issues.apache.org/jira/browse/SOLR-2859?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13138533#comment-13138533
]
David Smiley commented on SOLR-2859:
------------------------------------
I think we should definitely add some comments to solrconfig.xml to spell out
which request handlers use remote streaming. But beyond that, I think there
should be some declarative configuration to say which request handlers, or
perhaps by URL path, can use remote streaming.
> solrconfig should declare which request handlers can use remote streaming
> -------------------------------------------------------------------------
>
> Key: SOLR-2859
> URL: https://issues.apache.org/jira/browse/SOLR-2859
> Project: Solr
> Issue Type: Improvement
> Reporter: David Smiley
> Fix For: 4.0
>
>
> Solr's remote streaming feature is useful but represents a security risk. It
> can be enabled or disabled which is all or nothing. I propose that the
> solrconfig.xml file clearly indicate which handler(s) may use remote
> streaming. Presently, the only way to truly know is to look through the
> source of each handler to figure out which ones use it.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
