[
https://issues.apache.org/jira/browse/SOLR-14561?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17289083#comment-17289083
]
Thomas Mortagne commented on SOLR-14561:
----------------------------------------
So I looked at all that in more details and I feel that there is no clean
quickfix for this, so I will go with a workaround for now. I explained what I
feel is wrong in the design of assertPathAllowed in
https://issues.apache.org/jira/browse/SOLR-15151?focusedCommentId=17289081&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-17289081.
> Validate parameters to CoreAdminAPI
> -----------------------------------
>
> Key: SOLR-14561
> URL: https://issues.apache.org/jira/browse/SOLR-14561
> Project: Solr
> Issue Type: Improvement
> Reporter: Jan Høydahl
> Assignee: Jan Høydahl
> Priority: Major
> Fix For: 8.6
>
> Time Spent: 4h 40m
> Remaining Estimate: 0h
>
> CoreAdminAPI does not validate parameter input. We should limit what users
> can specify for at least {{instanceDir and dataDir}} params, perhaps restrict
> them to be relative to SOLR_HOME or SOLR_DATA_HOME.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org
