Uploaded image for project: 'Solr'
  1. Solr
  2. SOLR-16155

DocumentBuilder should not include field values in error messages

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Patch Available
    • Critical
    • Resolution: Unresolved
    • 8.11.1
    • None
    • logging
    • None

    Description

      org.apache.solr.update.DocumentBuilder throws exceptions with field values on errors, which could reveal customer's sensitive data on log files and UI.

      Field values shouldn't be included in the error messages.

      Attachments

        Issue Links

          Activity

            People

              janhoy Jan Høydahl
              jerry-cherry Jerry Chung
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h 20m
                  1h 20m