[
https://issues.apache.org/jira/browse/SOLR-14067?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
David Smiley updated SOLR-14067:
--------------------------------
Fix Version/s: (was: 8.7)
Description:
Move server-side scripting out of core and into a new contrib. This is better
for security.
Former description:
----
We should eliminate all scripting capabilities within Solr. Let us start with
the StatelessScriptUpdateProcessor deprecation/removal.
was:We should eliminate all scripting capabilities within Solr. Let us start
with the StatelessScriptUpdateProcessor deprecation/removal.
Summary: Move StatelessScriptUpdateProcessor to a contrib (was:
Deprecate StatelessScriptUpdateProcessor and disabled by default)
Let's just do this for 9.0; no need to touch 8.x.
May I suggest also moving the XSLT functionality to this contrib? There are
risks to its presence just as there are to executing Javascript. Make this
"scripting" in general, not just this URP. It could expand to include new
functionality some day like for a request handler (there is a JIRA issue for
that).
> Move StatelessScriptUpdateProcessor to a contrib
> ------------------------------------------------
>
> Key: SOLR-14067
> URL: https://issues.apache.org/jira/browse/SOLR-14067
> Project: Solr
> Issue Type: Improvement
> Reporter: Ishan Chattopadhyaya
> Assignee: David Eric Pugh
> Priority: Major
> Time Spent: 1h 50m
> Remaining Estimate: 0h
>
> Move server-side scripting out of core and into a new contrib. This is
> better for security.
> Former description:
> ----
> We should eliminate all scripting capabilities within Solr. Let us start with
> the StatelessScriptUpdateProcessor deprecation/removal.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org
