Mailing-List: contact dev-help@lucene.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@lucene.apache.org
Date: Thu, 24 May 2012 13:30:54 +0000 (UTC)
From: =?utf-8?Q?Rapha=C3=ABl_Droz_=28JIRA=29?= <jira@apache.org>
To: dev@lucene.apache.org
Message-ID: <444814109.105.1337866255763.JavaMail.jiratomcat@issues-vm>
In-Reply-To: <1625098254.66.1337865715518.JavaMail.jiratomcat@issues-vm>
Subject: [jira] [Updated] (SOLR-3485) Make /browse (files and handlers)
 dependencies self URL-contained
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


     [ https://issues.apache.org/jira/browse/SOLR-3485?page=3Dcom.atlassian=
.jira.plugin.system.issuetabpanels:all-tabpanel ]

Rapha=C3=ABl Droz updated SOLR-3485:
-------------------------------

    Attachment: SOLR-3485-browse-static-files-URL-1.patch

patch affects the example configuration :
* changes the location of expected for jquery.autocomplete.* and main.css
* creates the corresponding /browse/file solr.admin.ShowFileRequestHandler.

It makes use of the patch provided in issue #SOLR-1833 in order to provide =
access to the restricted set of files absolutely needed and explicitly allo=
wed.
               =20
> Make /browse (files and handlers) dependencies self URL-contained
> -----------------------------------------------------------------
>
>                 Key: SOLR-3485
>                 URL: https://issues.apache.org/jira/browse/SOLR-3485
>             Project: Solr
>          Issue Type: Improvement
>          Components: web gui
>    Affects Versions: 4.0
>            Reporter: Rapha=C3=ABl Droz
>            Priority: Minor
>         Attachments: SOLR-3485-browse-static-files-URL-1.patch
>
>
> Assuming that /browse may be, now or later, safe for a public use it woul=
d be very useful to make it "self-contained" in a given URL pattern in orde=
r to allow URL-based access restrictions.
> There are 3 issues here :
> * static files (css/js/img)
> * external handlers like /terms, /clustering
> * pattern switch between /browse/* and /collection1/browse/*
> I only try to address the 1st issue, in the comment below.
> If both /terms and /clustering are safe to be public, then issue 2 may be=
 omitted.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs: https://issues.apache.org/jira/secure/ContactAdministrators!default.jsp=
a
For more information on JIRA, see: http://www.atlassian.com/software/jira

       
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org