[SOLR-5518] Move editing config files into a new handler

• Type: Improvement
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 4.7, 6.0
• Fix Version/s: 4.7, 6.0
• Assignee: Erick Erickson
• Reporter: Erick Erickson
• Created: 30/Nov/13 23:44
• Updated: 09/May/16 18:45
• Resolved: 03/Dec/13 02:07

Description

See SOLR-5287. Uwe Schindler pointed out that writing files the way 5287 is a security vulnerability and that disabling it should be the norm. Subsequent discussion came up with this idea.

Writing arbitrary config files should NOT be on by default.

We'll also incorporate Mark's idea of testing XML files before writing anywhere.

Issue Links

• blocks: SOLR-5287 Allow at least solrconfig.xml and schema.xml to be edited via the admin screen
• is related to: SOLR-5539 Admin UI - Remove ability to create/modify files
• relates to: SOLR-5523 Implement proper security when writing config files to Solr
• relates to: SOLR-5522 Pull modifying the Solr config documents out of Solr 4.x
• relates to: SOLR-1523 Destructive Solr operations accept HTTP GET requests