[
https://issues.apache.org/jira/browse/SOLR-16296?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17601388#comment-17601388
]
ASF subversion and git services commented on SOLR-16296:
--------------------------------------------------------
Commit 66c784f7425a76604e1df7927505f8d5b2a2b691 in solr's branch
refs/heads/main from Haythem
[ https://gitbox.apache.org/repos/asf?p=solr.git;h=66c784f7425 ]
SOLR-16296: Use SafeXMLParsing in XmlConfigFile and QueryElevationComponent
(#962)
Really a refactoring; no change in behavior or actual safety.
Co-authored-by: David Smiley <[email protected]>
> Load elevate.xml in a more secure way
> -------------------------------------
>
> Key: SOLR-16296
> URL: https://issues.apache.org/jira/browse/SOLR-16296
> Project: Solr
> Issue Type: Improvement
> Security Level: Public(Default Security Level. Issues are Public)
> Reporter: Haythem Khiri
> Assignee: David Smiley
> Priority: Minor
> Time Spent: 6h 40m
> Remaining Estimate: 0h
>
> Solr should ensure that most XML files in a ConfigSet should be loaded in an
> untrusted way for security. XML files can have custom DTDs and Xinclude for
> ConfigSets provided externally.
> This is not about changing how solrconfig.xml and schema.xml is being loaded.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
