Hi Jan,
Before proceeding you should review
https://issues.apache.org/jira/browse/SOLR-15844 and also
https://issues.apache.org/jira/browse/SOLR-13971 ,
https://issues.apache.org/jira/browse/SOLR-14025 and their associated
CVE's. If after reading those you feel you need to continue to enable such
a dangerous feature (not recommended, but it's your system), you may need
to select an earlier version of Solr (prior to 14025 being fixed I think)
or patch a later version of Solr to not use SecureUberspector, or configure
it differently (see
https://github.com/apache/lucene-solr/commit/128360856d50d7b39473644e6c1c21ba11766195#diff-1e87c2460a42a273fc3b5a63c26f6fbe3f580f2001876d6792063cba6b3a47a0R379).
In any case you should also be aware that in future versions velocity will
not be available by default and you will need to install a Solritas package
for that type of functionality. (see
https://issues.apache.org/jira/browse/SOLR-14792). If this is not going to
be sufficient, you may wish to begin planning some other path forward, or
contribute enhancements to Solritas yourself.
-Gus
On Mon, Jan 17, 2022 at 11:46 AM Schluchtmann, Jan Christopher <
jan.christopher.schluchtm...@continental-corporation.com> wrote:
> Hello!
>
>
>
> I need your help ...
>
>
>
> In SOLR 7.5 I was able to get hold of JAVA objects by using
> "Class.forName"/ "getClass.forName":
>
> #set($sysEnv=$engine.getClass.forName('java.lang.System'))
>
> #set($sysEnv=$engine.class.forName('java.lang.System'))
>
>
>
> In SOLR 8.11.1 this doesn't work any more and I don't know why.
>
> It is probably a configuration problem. I assume, it has security reasons.
>
>
>
> I tried a lot but couldn't find a solution yet and I am a bit desperate
> right now.
>
> I hope, you can help me or point me into the right direction.
>
>
>
> Thank you very much!
>
>
>
> Regards
>
> Jan
>
--
http://www.needhamsoftware.com (work)
http://www.the111shift.com (play)
