[ 
https://issues.apache.org/jira/browse/SOLR-14066?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16994375#comment-16994375
 ] 

Ishan Chattopadhyaya commented on SOLR-14066:
---------------------------------------------

bq. Let the DIH savvy committers decide
That's why I wanted [~noble.paul]'s and [~shalin]'s opinion. Shalin agrees in 
principle, I think: 
https://the-asf.slack.com/archives/CEKUCUNE9/p1575684825219600?thread_ts=1575653725.184700&cid=CEKUCUNE9

DIH has a ScriptTransformer, which can execute arbitrary code. It is a 
liability.

bq. So before we deprecate we should probably wrap it as a package and solicit 
on solr-user our intentions
By deprecating it now, we put the users on notice. By 9x, we can have packages 
for DIH and then it can be removed.

> Deprecate DIH
> -------------
>
>                 Key: SOLR-14066
>                 URL: https://issues.apache.org/jira/browse/SOLR-14066
>             Project: Solr
>          Issue Type: Improvement
>      Security Level: Public(Default Security Level. Issues are Public) 
>          Components: contrib - DataImportHandler
>            Reporter: Ishan Chattopadhyaya
>            Priority: Major
>             Fix For: 8.4
>
>
> DataImportHandler has outlived its utility. DIH doesn't need to remain inside 
> Solr anymore. Let us deprecate DIH in 8.4 (and remove it from the Solr distro 
> in 9x or 10x).



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org

Reply via email to