[jira] [Commented] (SOLR-13409) Remove directory listings in Jetty config

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[jira] [Commented] (SOLR-13409) Remove directory listings in Jetty config

JIRA jira@apache.org

    [ https://issues.apache.org/jira/browse/SOLR-13409?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16819871#comment-16819871 ]

ASF subversion and git services commented on SOLR-13409:

Commit df27ccf01d9b89149fbba00e81c3eed078e28a95 in lucene-solr's branch refs/heads/master from Uwe Schindler
[ https://gitbox.apache.org/repos/asf?p=lucene-solr.git;h=df27ccf ]

SOLR-13409: Disable HTML directory listings in admin interface to prevent possible security issues

> Remove directory listings in Jetty config
> -----------------------------------------
>                 Key: SOLR-13409
>                 URL: https://issues.apache.org/jira/browse/SOLR-13409
>             Project: Solr
>          Issue Type: Improvement
>      Security Level: Public(Default Security Level. Issues are Public)
>          Components: Server
>    Affects Versions: 8.0
>            Reporter: Uwe Schindler
>            Assignee: Uwe Schindler
>            Priority: Major
>             Fix For: 8.1, master (9.0)
>         Attachments: SOLR-13409.patch
> In the shipped Jetty configuration the directory listings are enabled, although not used in the admin interface. For security reasons this should be disabled.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]