bruno-roustant commented on a change in pull request #47:
URL: https://github.com/apache/solr/pull/47#discussion_r618245496
##########
File path: solr/solr-ref-guide/src/major-changes-in-solr-8.adoc
##########
@@ -283,9 +283,9 @@ The login screen's purpose is cosmetic only - Admin
UI-triggered Solr requests w
*Distributed Requests*
-* The `shards` parameter, used to manually select the shards and replicas that
receive distributed requests, now checks nodes against a whitelist of
acceptable values for security reasons.
+* The `shards` parameter, used to manually select the shards and replicas that
receive distributed requests, now checks nodes against an allow-list of
acceptable values for security reasons.
+
-In SolrCloud mode this whitelist is automatically configured to contain all
live nodes. In standalone mode the whitelist is empty by default. Upgrading
users who use the `shards` parameter in standalone mode can correct this value
by setting the `shardsWhitelist` property in any `shardHandler` configurations
in their `solrconfig.xml` file.
+In SolrCloud mode this allow-list is automatically configured to contain all
live nodes. In standalone mode the allow-list is empty by default. Upgrading
users who use the `shards` parameter in standalone mode can correct this value
by setting the `allowUrls` property in their `solrconfig.xml` file.
Review comment:
I'll also add a sentence in major-changes-in-solr-9.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org
