[
https://issues.apache.org/jira/browse/SOLR-13985?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16992611#comment-16992611
]
Jason Gerlowski commented on SOLR-13985:
----------------------------------------
Looking at this patch, it looks like we have the Jetty Host set inconsistently
across our http and https jetty.xml files:
{code}
solr/server/etc/jetty-http.xml: <Set name="host"><Property
name="jetty.host" /></Set>
solr/server/etc/jetty-https.xml: <Set name="host"><Property
name="solr.jetty.host" /></Set>
solr/server/etc/jetty-https8.xml: <Set name="host"><Property
name="solr.jetty.host" /></Set>
{code}
"jetty.host" vs "solr.jetty.host". Assuming that's not done intentionally(?),
we should probably correct that on our way through here.
> bind to localhost by default
> ----------------------------
>
> Key: SOLR-13985
> URL: https://issues.apache.org/jira/browse/SOLR-13985
> Project: Solr
> Issue Type: Improvement
> Security Level: Public(Default Security Level. Issues are Public)
> Reporter: Robert Muir
> Priority: Major
> Attachments: SOLR-13985.patch
>
>
> Currently solr binds to all interfaces by default.
> The default should be safer, so that e.g. the user is not exposed to the
> internet until they make an explicit step to do so.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
