Hi,
We'd like to enable custom scoring using a script that we'll install under
config/scripts, so that we can invoke it as part of a function_score query,
like
"query": {
"function_score": {
"query" : { ... },
"functions": [ {
"script_score": {
"script": "my-script" // installed in config/scripts/my-script.mvel
}
}]
}
}
In order to do this, it looks like we have to set
script.disable_dynamic: false
in elasticsearch.yml.
But that also allows arbitrary script code to be submitted as the body of
the script field, which we want to disallow.
Is it possible to configure scripting to work only with named scripts that
are installed? It seems like the one config option I found is to coarse
for this.
Thanks!
-gregj
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/e866778e-c8db-4e9e-8ce9-3e1ada7529f6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
