[jira] [Reopened] (SOLR-1509) ShowFileRequestHandler has missleading error when asked for absolute path

["Erick Erickson (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SOLR-1509?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Erick Erickson reopened SOLR-1509:
----------------------------------


> ShowFileRequestHandler has missleading error when asked for absolute path
> -------------------------------------------------------------------------
>
>                 Key: SOLR-1509
>                 URL: https://issues.apache.org/jira/browse/SOLR-1509
>             Project: Solr
>          Issue Type: Bug
>    Affects Versions: 1.4
>            Reporter: Simon Rosenthal
>            Priority: Minor
>
> When a user attempts to use the ShowFileRequestHandler (ie: /admin/file ) to access a file using an absolute path (which may result from solr.xml containing an absolute path for schema.xml or solrconfig.xml outside of the normal conf dir) then the error message indicates that a file with the path consisting of the confdir + the absolute path can't be found.  the Handler should explicitly check for absolute paths (like it checks for ".." and error message should make it clear that absolute paths are not allowed.
> Example of current behavior...
> {noformat}
> schema path = /home/solrdata/rig1/conf/schema.xml
> url displayed in admin form = http://host:port/solr/core1/admin/file/?file=/home/solrdata/rig1/conf/schema.xml
> error message: Can not find: schema.xml [/path/to/core1/conf/directory/home/solrdata/rig1/conf/schema.xml]
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.1#6144)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org