4 ms·
Noob Question; how do we ensure that full query interface of elasticsearh isn't exposed to the browsers? PS: I m using elasticsearch in the backend.
by diminish 11y ago
Noob Question; how do we ensure that full query interface of elasticsearh isn't exposed to the browsers?
PS: I m using elasticsearch in the backend.
- joemcelroy 11y agoWe proxy the elasticsearch connection through the server and sanitize the request. Some installations also add more filters like permissions filter. In future releases, we're going to improve on this. Stay tuned!
- Fennhella 11y agoYou could proxy using nginx to allow read only access to specific endpoints, there's a few good posts about it going into better detail than me, for example: http://blog.eagerelk.com/securing-elasticsearch-using-nginx-as-a-proxy/ http://blog.eagerelk.com/securing-elasticsearch-using-nginx-...
- ssetem 11y agohttp://docs.searchkit.co/stable/docs/server/searchkit_express.html http://docs.searchkit.co/stable/docs/server/searchkit_expres... we ship a node.js proxy to hide your elastic instance, and you can add permission filters etc.