Re: solr-injection

2020-02-11 Thread Jörn Franke
). > Am 11.02.2020 um 10:55 schrieb Martin Frank Hansen (MHQ) : > > Hi, > > I was wondering how others are handling solr – injection in their solutions? > > After reading this post: > https://www.waratek.com/apache-solr-injection-vulnerability-customer-alert/ I

solr-injection

2020-02-11 Thread Martin Frank Hansen (MHQ)
Hi, I was wondering how others are handling solr – injection in their solutions? After reading this post: https://www.waratek.com/apache-solr-injection-vulnerability-customer-alert/ I can see how important it is to update to Solr-8.2 or higher. Has anyone been successful in injecting

Solr injection

2018-07-30 Thread Богдан
Hi, What is the threat of Solr injection? Examples: ""+_val_:"query({!dismax v='fghfhfghfgh'})" "11"+_val_:"sum(1,2)" AND id:4355 etc.. Thanks!)

Re: Solr Injection

2007-07-03 Thread Walter Underwood
The Atom Publishing Protocol would be a good choice for a rest API to Solr. That comes with a spec, interop testing, and an active community. wunder On 7/2/07 6:22 PM, Ian Holsman [EMAIL PROTECTED] wrote: Hi. I've been playing with Kettle (http://kettle.pentaho.org/ ) as a method to inject

Re: Solr Injection

2007-07-03 Thread Ryan McKinley
What would an update request look like? How close/far is this from the existing format/functions? Is it just a syntax change from what we have or would it require something more? Is this something that can be handled with XSLT processing an atom file?

Re: Solr Injection

2007-07-03 Thread Henrik Martin
Take a look at the ROME API. They have support for Atom 0.3, 1.0, and just about every RSS format on the planet. It's a very solid API and widely used in the open source community. There was something on their mailing list about support for the publishing part of Atom not too long ago. I think

Solr Injection

2007-07-02 Thread Ian Holsman
Hi. I've been playing with Kettle (http://kettle.pentaho.org/ ) as a method to inject data into Solr (and other things at the same time), and it looks really promising. I was wondering if anyone else had some experience using it with Solr and if they set it up to add a document at a time,