diff --git a/docs/reference/modules/scripting/security.asciidoc b/docs/reference/modules/scripting/security.asciidoc index 37168f56b8f..f1946bd0f28 100644 --- a/docs/reference/modules/scripting/security.asciidoc +++ b/docs/reference/modules/scripting/security.asciidoc @@ -35,6 +35,7 @@ possible for a sufficiently determined malicious user to write searches that overwhelm the Elasticsearch cluster and bring it down. For example: Good: + * Users type text into a search box and the text is sent directly to a <>, <>, <>, or any of the <>. @@ -44,6 +45,7 @@ the application development process. * User actions makes documents with a fixed structure. Bad: + * Users can write arbitrary scripts, queries, `_search` requests. * User actions make documents with structure defined by users.