You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@solr.apache.org by "Jan Høydahl (Jira)" <ji...@apache.org> on 2021/12/02 08:44:00 UTC

[jira] [Created] (SOLR-15826) ResourceLoader should better respect allowed paths

Jan Høydahl created SOLR-15826:
----------------------------------

             Summary: ResourceLoader should better respect allowed paths
                 Key: SOLR-15826
                 URL: https://issues.apache.org/jira/browse/SOLR-15826
             Project: Solr
          Issue Type: Bug
      Security Level: Public (Default Security Level. Issues are Public)
            Reporter: Jan Høydahl
            Assignee: Jan Høydahl


ResourceLoader only returns files relative to instanceDir or resources from Classpath, but the check for whether the requested resource is relative to instanceDir or not happens after an attempt to check if the file exists. This can cause weird bugs, so we should move the check earlier.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org