[jira] [Commented] (SOLR-13409) Remove directory listings in Jetty config

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[jira] [Commented] (SOLR-13409) Remove directory listings in Jetty config

JIRA jira@apache.org

    [ https://issues.apache.org/jira/browse/SOLR-13409?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16819872#comment-16819872 ]

ASF subversion and git services commented on SOLR-13409:

Commit e1901aaabb6dbb477eeb6c0b7b38731c52748635 in lucene-solr's branch refs/heads/branch_8x from Uwe Schindler
[ https://gitbox.apache.org/repos/asf?p=lucene-solr.git;h=e1901aa ]

SOLR-13409: Disable HTML directory listings in admin interface to prevent possible security issues

> Remove directory listings in Jetty config
> -----------------------------------------
>                 Key: SOLR-13409
>                 URL: https://issues.apache.org/jira/browse/SOLR-13409
>             Project: Solr
>          Issue Type: Improvement
>      Security Level: Public(Default Security Level. Issues are Public)
>          Components: Server
>    Affects Versions: 8.0
>            Reporter: Uwe Schindler
>            Assignee: Uwe Schindler
>            Priority: Major
>             Fix For: 8.1, master (9.0)
>         Attachments: SOLR-13409.patch
> In the shipped Jetty configuration the directory listings are enabled, although not used in the admin interface. For security reasons this should be disabled.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]