On 11/15/2013 12:04 AM, Uwe Schindler wrote:
> I am busy today and cannot modify that, but we should really add the new
> "security" feature of SolrResourceLoader to only being able to load stuff
> from below core's/instance's/... config dirs (unless you add a sysprop, see
> https://issues.apache.org/jira/browse/SOLR-4882). This may break some
> installations unless they use symlinks or use the sysprop.
I had not noticed this issue before. I have some devil's advocate
questions. Apologies for not seeing the issue and bringing it up
sooner. You've probably already thought of these things.
Would this prevent loading from ${solr.solr.home}/lib or the sharedLib
directory, or is this only for <lib> directives in solrconfig.xml? I
believe these happen at the CoreContainer level, before core loading
takes place, so I doubt there are any instanceDir locations available.
Related side issue: SOLR-4852.
The example solrconfig.xml loads contrib jars from locations under dist,
which is outside not only instanceDir, but outside the solr home, and
even outside the jetty home. If it requires a system property to
override that, how will it work for the example?
Thanks,
Shawn
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
