[
https://issues.apache.org/jira/browse/SOLR-1233?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Erik Hatcher resolved SOLR-1233.
--------------------------------
Resolution: Fixed
Committed.
The Solr wiki is broken for saving at the time of writing, but this blurb
belongs on the SolrSecurity page:
== Request Handler Paths ==
Solr provides access to request handlers through a general purpose
/select?qt=request_handler_name URL. Prior to ["Solr1.4"] (via SOLR-1233),
request handlers named with a leading forward-slash like
/select?qt=/request_handler_name could not be used, but had to be requested
using /request_handler_name. ["Solr1.4"] removes the forward-slash restriction
and allows /select to work with any request handler name. Externally blocking
access to /select is recommended in environments where only path-based access
to request handlers is warranted.
> Remove restriction that /select cannot be used for /-prefixed request
> handlers via qt
> -------------------------------------------------------------------------------------
>
> Key: SOLR-1233
> URL: https://issues.apache.org/jira/browse/SOLR-1233
> Project: Solr
> Issue Type: Improvement
> Components: search
> Affects Versions: 1.3
> Reporter: Erik Hatcher
> Assignee: Erik Hatcher
> Priority: Minor
> Fix For: 1.4
>
> Attachments: SOLR-1233.patch
>
>
> Currently /select?qt=/whatever is blocked by SolrDispatchFilter. It makes
> life a lot easier to make general requests to any request handler (for
> example in SOLR-1230 where dataimport.jsp needs to request to arbitrary
> handler names).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
