[SOLR-14176] Graph of SolrCloud is not shown in UI

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 8.4
• Component/s: Admin UI, SolrCloud

Environment

Linux RHEL

• Assignee: Unassigned
• Reporter: Jörn Franke
• Created: 07/Jan/20 21:13
• Updated: 21/Jan/20 16:57
• Resolved: 08/Jan/20 18:29

Description

Since 8.4 the Graph in the Admin UI (Solr Cloud) is not shown. The console reveals that it uses the eval function which is blocked by Content-Security-Policy (probably introduced in 8.4).

I dont want to prescribe a solution here, but you could find the eval statement in the Admin UI and get rid of it (if possible, it might be a third party library) or relax the CSP for this specific page.

 

At the moment, the page is not usable, but this only means a limited view on what happens in Solr - it does not affect running Solr.

Issue Links

• is related to: SOLR-13982 set security-related http response headers by default
• is related to: SOLR-13987 Admin UI should not rely on javascript eval()