You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "Alexandre Rafalovitch (JIRA)" <ji...@apache.org> on 2016/10/02 01:46:20 UTC

[jira] [Closed] (SOLR-1509) ShowFileRequestHandler has missleading error when asked for absolute path

     [ https://issues.apache.org/jira/browse/SOLR-1509?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alexandre Rafalovitch closed SOLR-1509.
---------------------------------------
    Resolution: Not A Bug

An ancient confusing error message. If anybody is still confused about it, the issue can be reopened/new issue created.

> ShowFileRequestHandler has missleading error when asked for absolute path
> -------------------------------------------------------------------------
>
>                 Key: SOLR-1509
>                 URL: https://issues.apache.org/jira/browse/SOLR-1509
>             Project: Solr
>          Issue Type: Bug
>    Affects Versions: 1.4
>            Reporter: Simon Rosenthal
>            Priority: Minor
>
> When a user attempts to use the ShowFileRequestHandler (ie: /admin/file ) to access a file using an absolute path (which may result from solr.xml containing an absolute path for schema.xml or solrconfig.xml outside of the normal conf dir) then the error message indicates that a file with the path consisting of the confdir + the absolute path can't be found.  the Handler should explicitly check for absolute paths (like it checks for ".." and error message should make it clear that absolute paths are not allowed.
> Example of current behavior...
> {noformat}
> schema path = /home/solrdata/rig1/conf/schema.xml
> url displayed in admin form = http://host:port/solr/core1/admin/file/?file=/home/solrdata/rig1/conf/schema.xml
> error message: Can not find: schema.xml [/path/to/core1/conf/directory/home/solrdata/rig1/conf/schema.xml]
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org