[SOLR-2859] solrconfig should declare which request handlers can use remote streaming

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: David Smiley
• Created: 27/Oct/11 19:27
• Updated: 30/Dec/19 20:38

Description

Solr's remote streaming feature is useful but represents a security risk. It can be enabled or disabled which is all or nothing. I propose that the solrconfig.xml file clearly indicate which handler(s) may use remote streaming. Presently, the only way to truly know is to look through the source of each handler to figure out which ones use it.

Issue Links

• is related to: SOLR-2854 Load URL content stream on-demand, rather than automatically