[
https://issues.apache.org/jira/browse/SOLR-2859?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13138261#comment-13138261
]
Erik Hatcher commented on SOLR-2859:
------------------------------------
David - do you mean to simply comment the example request handler definitions?
Or something more formal?
I can see having request handler level control over whether content streams are
allowed, but that's of course a bigger change than simply adding comments.
> solrconfig should declare which request handlers can use remote streaming
> -------------------------------------------------------------------------
>
> Key: SOLR-2859
> URL: https://issues.apache.org/jira/browse/SOLR-2859
> Project: Solr
> Issue Type: Improvement
> Reporter: David Smiley
> Fix For: 4.0
>
>
> Solr's remote streaming feature is useful but represents a security risk. It
> can be enabled or disabled which is all or nothing. I propose that the
> solrconfig.xml file clearly indicate which handler(s) may use remote
> streaming. Presently, the only way to truly know is to look through the
> source of each handler to figure out which ones use it.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
