lucene-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hoss Man (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (SOLR-3895) For several reasons, disabling the resolving of external entities within the Solr UpdateRequestHandler for XML would be good.
Date Wed, 26 Sep 2012 18:21:07 GMT

     [ https://issues.apache.org/jira/browse/SOLR-3895?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Hoss Man updated SOLR-3895:
---------------------------

    Attachment: SOLR-3895.patch

Arguably this is a feature (using entity includes to split up files and manage updates) --
but since it's never one we advertised, and can cause Solr to fetch external URLs like DTD
that aren't needed, I agree it should either be off or configurable and off by default (we
can worry about that if anyone asks for it)

One thing we should worry about though is ensuring that named entities still work (because
we've definitely seen users take advantage of those) ... i've updated Uwe's patch with a test
to ensure we don't break that.
                
> For several reasons, disabling the resolving of external entities within the Solr UpdateRequestHandler
for XML would be good.
> -----------------------------------------------------------------------------------------------------------------------------
>
>                 Key: SOLR-3895
>                 URL: https://issues.apache.org/jira/browse/SOLR-3895
>             Project: Solr
>          Issue Type: Improvement
>          Components: update
>    Affects Versions: 3.6.1, 4.0-BETA
>            Reporter: Martin Herfurt
>            Assignee: Uwe Schindler
>            Priority: Minor
>             Fix For: 4.1, 5.0
>
>         Attachments: SOLR-3895.patch, SOLR-3895.patch
>
>
> The Solr UpdateRequestHandler for XML currently resolves so-called XML External Entities.
Not resolving XML External Entities would - among other things - improve Solr's update performance.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


Mime
View raw message