You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@solr.apache.org by "Jan Høydahl (Jira)" <ji...@apache.org> on 2021/12/06 13:50:00 UTC

[jira] [Resolved] (SOLR-15826) ResourceLoader should better respect allowed paths

     [ https://issues.apache.org/jira/browse/SOLR-15826?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jan Høydahl resolved SOLR-15826.
--------------------------------
    Resolution: Fixed

> ResourceLoader should better respect allowed paths
> --------------------------------------------------
>
>                 Key: SOLR-15826
>                 URL: https://issues.apache.org/jira/browse/SOLR-15826
>             Project: Solr
>          Issue Type: Bug
>      Security Level: Public(Default Security Level. Issues are Public) 
>            Reporter: Jan Høydahl
>            Assignee: Jan Høydahl
>            Priority: Major
>             Fix For: main (9.0), 8.11.1
>
>          Time Spent: 1h 20m
>  Remaining Estimate: 0h
>
> ResourceLoader only returns files relative to instanceDir or resources from Classpath, but we have a few file-exists checks that are done prior to these checks, which can cause weird bugs. In this issue we'll clean up this, along with a few refactorings and code simplifications.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org