4 ms·
I recommend elasticsearch as well. Just make sure to firewall it off and be careful opening it up. Elasticsearch a few versions back had a remote exploit.
by jtchang 11y ago
I recommend elasticsearch as well. Just make sure to firewall it off and be careful opening it up. Elasticsearch a few versions back had a remote exploit.
- GlennS 11y agoIn particular, ElasticSearch offers the possibility to include snippets of scripts from a number of languages (e.g. Groovy) in your search. If you do so, the file-access capability of those languages remains available. I'd be surprised if it's an issue these days, because: 1. It's disabled by default, and has been for a while. 2. If you do turn it on, the config options let you be more specific about where those scripts are allowed to come from.