[ https://issues.apache.org/jira/browse/SOLR-13985?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17285717#comment-17285717 ]
Andras Salamon commented on SOLR-13985: --------------------------------------- It seems to me, after the revert a new version has been committed but the Jira is still in REOPENED status. Do we need some other changes? A second question: Isn't it too strict to bind to localhost? It means that solr will not work out-of-the-box if I have multiple solr nodes. Or the security concerns are more important? > bind to localhost by default > ---------------------------- > > Key: SOLR-13985 > URL: https://issues.apache.org/jira/browse/SOLR-13985 > Project: Solr > Issue Type: Improvement > Reporter: Robert Muir > Assignee: Jason Gerlowski > Priority: Major > Fix For: master (9.0) > > Attachments: SOLR-13985.patch, SOLR-13985.patch, SOLR-13985.patch, > SOLR-13985.patch > > Time Spent: 50m > Remaining Estimate: 0h > > Currently solr binds to all interfaces by default. > The default should be safer, so that e.g. the user is not exposed to the > internet until they make an explicit step to do so. -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org For additional commands, e-mail: issues-h...@lucene.apache.org