[ https://issues.apache.org/jira/browse/SOLR-14561?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17140291#comment-17140291 ]
Jan Høydahl commented on SOLR-14561: ------------------------------------ Master: [936b9d770e769c9018a9f408d576f52e7c4e8be2|https://github.com/apache/lucene-solr/commit/936b9d770e769c9018a9f408d576f52e7c4e8be2] Branch_8x: [d0ccf27d54e5556610a5d75077585d6fd45a733f|https://github.com/apache/lucene-solr/commit/d0ccf27d54e5556610a5d75077585d6fd45a733f] > Validate parameters to CoreAdminAPI > ----------------------------------- > > Key: SOLR-14561 > URL: https://issues.apache.org/jira/browse/SOLR-14561 > Project: Solr > Issue Type: Improvement > Security Level: Public(Default Security Level. Issues are Public) > Reporter: Jan Høydahl > Assignee: Jan Høydahl > Priority: Major > Fix For: 8.6 > > Time Spent: 3h 40m > Remaining Estimate: 0h > > CoreAdminAPI does not validate parameter input. We should limit what users > can specify for at least {{instanceDir and dataDir}} params, perhaps restrict > them to be relative to SOLR_HOME or SOLR_DATA_HOME. -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org For additional commands, e-mail: issues-h...@lucene.apache.org