News for hackers. Stuff that matters.
Re:Searchkit 0.8 – React UI Components for Elasticsearch by diminish on Sunday March 20, 2016 @03:24PM (#11324238)
Noob Question; how do we ensure that full query interface of elasticsearh isn't exposed to the browsers?

PS: I m using elasticsearch in the backend.

Re:Searchkit 0.8 – React UI Components for Elasticsearch by Fennhella on Sunday March 20, 2016 @03:31PM (#11324267)
You could proxy using nginx to allow read only access to specific endpoints, there's a few good posts about it going into better detail than me, for example:

http://blog.eagerelk.com/securing-elasticsearch-using-nginx-...

Re:Searchkit 0.8 – React UI Components for Elasticsearch by joemcelroy on Sunday March 20, 2016 @03:29PM (#11324256)
We proxy the elasticsearch connection through the server and sanitize the request. Some installations also add more filters like permissions filter.

In future releases, we're going to improve on this. Stay tuned!

Re:Searchkit 0.8 – React UI Components for Elasticsearch by ssetem on Sunday March 20, 2016 @04:21PM (#11324472)
http://docs.searchkit.co/stable/docs/server/searchkit_expres...

we ship a node.js proxy to hide your elastic instance, and you can add permission filters etc.