Hi,

the exception message created in RemoteSolrException contains the remote 
hostname and maybe the port.


public RemoteSolrException(String remoteHost, int code, String msg, Throwable 
th) { super(code, "Error from server at " + remoteHost + ": " + msg, th); }


 If the exception is written to a log file this could be seen as a security 
leak. The problem is that the exception is not declared, so no one expects it 
to happen. It would be nice, if the http client can be configured to write the 
hostname in the exception or not.

Regards
Gerd

Reply via email to