Uploaded image for project: 'Solr'
  1. Solr
  2. SOLR-3895

For several reasons, disabling the resolving of external entities within the Solr UpdateRequestHandler for XML would be good.

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 3.6.1, 4.0-BETA
    • 4.1, 6.0
    • update
    • None

    Description

      The Solr UpdateRequestHandler for XML currently resolves so-called XML External Entities. Not resolving XML External Entities would - among other things - improve Solr's update performance.

      Attachments

        1. SOLR-3895.patch
          14 kB
          Chris M. Hostetter
        2. SOLR-3895.patch
          14 kB
          Chris M. Hostetter
        3. SOLR-3895.patch
          13 kB
          Chris M. Hostetter
        4. SOLR-3895.patch
          13 kB
          Uwe Schindler
        5. SOLR-3895+3614.patch
          16 kB
          Uwe Schindler
        6. SOLR-3895+3614.patch
          15 kB
          Uwe Schindler

        Issue Links

          incorporates

          Bug - A problem which impairs or prevents the functions of the product. SOLR-3614 XML parsing in XPathEntityProcessor doesn't respect ENTITY declarations?

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. SOLR-4881 Fix DocumentAnalysisRequestHandler to correctly use EmptyEntityResolver

          • Major - Major loss of function.
          • Closed
          is required by

          Bug - A problem which impairs or prevents the functions of the product. SOLR-5520 Backport some security fixes from 4.x to 3.6.x branch

          • Major - Major loss of function.
          • Resolved
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. SOLR-3974 Disabling External entity resolution when using XSL in DIH

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              uschindler Uwe Schindler
              mherfurt Martin Herfurt
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: