hi I already know abt echoParam=none in request parameter and setting in solr config file.
But even if i specify "none" in config file, request parameter overrides it. Echo back to browser has some issues. For instance rows parameter accepts script tag and echo back actually runs the script in browser. Anyway to set echoParams=none and ignore request parameter? -- View this message in context: http://lucene.472066.n3.nabble.com/disable-echoParam-completely-for-security-issues-tp3414411p3414411.html Sent from the Solr - User mailing list archive at Nabble.com.
