dsmiley commented on a change in pull request #1938:
URL: https://github.com/apache/lucene-solr/pull/1938#discussion_r499113760
##########
File path: solr/core/src/java/org/apache/solr/rest/RestManager.java
##########
@@ -326,44 +327,46 @@ public void doInit() throws ResourceException {
}
}
}
-
+
if (managedResource == null) {
- if (Method.PUT.equals(getMethod()) || Method.POST.equals(getMethod()))
{
+ final String method = getSolrRequest().getHttpMethod();
+ if ("PUT".equals(method) || "POST".equals(method)) {
Review comment:
If you click the details link, it explains. It's pretty wild what it
suggests... it's a stretch IMO. Good luck pulling that attack off. Besides,
this is the HTTP method (fixed vocab); it's not a param.
Our use of Muse here is very new.... we haven't tweaked `.muse/config.toml`
yet but it needs some taming. https://docs.muse.dev/docs/configuring-muse/
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org
