This message was deleted.
# generals
Slackbot
09/14/2023, 7:47 PMThis message was deleted.
a
Adam Peck
09/15/2023, 12:55 AMhttps://druid.apache.org/docs/latest/development/javascript/#security should work to disable javascript
Adam Peck
09/15/2023, 12:56 AMBy setting that to false as true used to be the default.
o
Oleg Yamin
09/15/2023, 12:57 AMOh sweet! Thank you I’ll try that
a
Adam Peck
09/15/2023, 12:59 AMOh though I think the CVE mentioned even with it disabled it doesn't disable all request types...
o
Oleg Yamin
09/15/2023, 1:04 AMI’ll check if it’s enabled and try disabling and see if that will work
Oleg Yamin
09/15/2023, 3:50 PMYeah.. the default value is set to 'false':
https://druid.apache.org/docs/0.17.1/configuration/#javascript