[
https://issues.apache.org/jira/browse/SOLR-8266?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15049265#comment-15049265
]
Joel Bernstein commented on SOLR-8266:
--------------------------------------
As this ticket also removes the security risk associated with Object
serialization, I plan to also uncomment the /stream handler in the sample
solrconfig.xml so the SQL interface etc... will be operational out of the box.
The /stream handler now only excepts a Streaming Expression query and returns
json.
> Remove Java Serialization from the Streaming API
> ------------------------------------------------
>
> Key: SOLR-8266
> URL: https://issues.apache.org/jira/browse/SOLR-8266
> Project: Solr
> Issue Type: Improvement
> Reporter: Joel Bernstein
> Attachments: SOLR-8266-comment-out-testParallelEOF.patch,
> SOLR-8266.patch
>
>
> This is being done mainly for security reasons but it's also architecturally
> the right thing to do.
> Going forward only Streaming Expressions will be used to serialize Streaming
> API Objects.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
