Re:Web search 30M rows sub-second, cheaply
by GlennS on Sunday November 22, 2015 @05:38PM
(#10611798)
In particular, ElasticSearch offers the possibility to include snippets of scripts from a number of languages (e.g. Groovy) in your search. If you do so, the file-access capability of those languages remains available.
I'd be surprised if it's an issue these days, because:
1. It's disabled by default, and has been for a while.
2. If you do turn it on, the config options let you be more specific about where those scripts are allowed to come from.
I'd be surprised if it's an issue these days, because:
1. It's disabled by default, and has been for a while.
2. If you do turn it on, the config options let you be more specific about where those scripts are allowed to come from.