You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@solr.apache.org by "Kevin Risden (Jira)" <ji...@apache.org> on 2022/10/19 19:28:00 UTC

[jira] [Commented] (SOLR-16474) Resolving some external entities in Solr/Jetty configuration files currently does not work

    [ https://issues.apache.org/jira/browse/SOLR-16474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17620524#comment-17620524 ] 

Kevin Risden commented on SOLR-16474:
-------------------------------------

[~veita] not sure I understand the issue here. What code in Solr is causing the error? It seems like in https://github.com/eclipse/jetty.project/issues/8738 you also didn't provide the code that all of a sudden went from working to "Today it started to throw an org.xml.sax.SAXParseException, probably due to the HTML HTTP body sent with the 301 response."

What is the actual code that caused issues? Are you referring to something that loads the XML config files? This seems like something outside the Solr project doing the XML parsing.

Based on what I've read in the linked Jetty issue - any XML dtd is allowed to keep the http endpoint and whatever is processing the XML should handle the redirect if necessary.

> Resolving some external entities in Solr/Jetty configuration files currently does not work
> ------------------------------------------------------------------------------------------
>
>                 Key: SOLR-16474
>                 URL: https://issues.apache.org/jira/browse/SOLR-16474
>             Project: Solr
>          Issue Type: Bug
>      Security Level: Public(Default Security Level. Issues are Public) 
>          Components: config-api
>    Affects Versions: 9.0
>            Reporter: Alexander Veit
>            Priority: Major
>
> Eclipse seems to have switched its website from HTTP to HTTPS.
> As a consequence parsing of Solr XML configuration files with a XML parser sometimes runs into errors. E.g. the system ID http://www.eclipse.org/jetty/configure_9_0.dtd does not resolve.
> Files affected include
> {noformat}
> solr/server/etc/jetty-https.xml
> solr/server/contexts/solr-jetty-context.xml
> solr/server/etc/jetty.xml
> solr/server/etc/jetty-http.xml
> solr/server/etc/jetty-ssl.xml
> solr/server/etc/jetty-requestlog.xml
> {noformat}
> I do not know whether the problem affects Solr itself, so you might consider this issue as informational.
> Also see https://github.com/eclipse/jetty.project/issues/8738



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org