[
https://issues.apache.org/jira/browse/SOLR-3895?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Hoss Man updated SOLR-3895:
---------------------------
Attachment: SOLR-3895.patch
Arguably this is a feature (using entity includes to split up files and manage
updates) -- but since it's never one we advertised, and can cause Solr to fetch
external URLs like DTD that aren't needed, I agree it should either be off or
configurable and off by default (we can worry about that if anyone asks for it)
One thing we should worry about though is ensuring that named entities still
work (because we've definitely seen users take advantage of those) ... i've
updated Uwe's patch with a test to ensure we don't break that.
> For several reasons, disabling the resolving of external entities within the
> Solr UpdateRequestHandler for XML would be good.
> -----------------------------------------------------------------------------------------------------------------------------
>
> Key: SOLR-3895
> URL: https://issues.apache.org/jira/browse/SOLR-3895
> Project: Solr
> Issue Type: Improvement
> Components: update
> Affects Versions: 3.6.1, 4.0-BETA
> Reporter: Martin Herfurt
> Assignee: Uwe Schindler
> Priority: Minor
> Fix For: 4.1, 5.0
>
> Attachments: SOLR-3895.patch, SOLR-3895.patch
>
>
> The Solr UpdateRequestHandler for XML currently resolves so-called XML
> External Entities. Not resolving XML External Entities would - among other
> things - improve Solr's update performance.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org
