OpenSearch/x-pack/plugin/security
Nhat Nguyen 6665ebe7ab Harden search context id (#53143)
Using a Long alone is not strong enough for the id of search contexts
because we reset the id generator whenever a data node is restarted.
This can lead to two issues:

1. Fetch phase can fetch documents from another index
2. A scroll search can return documents from another index

This commit avoids these issues by adding a UUID to SearchContexId.
2020-03-11 11:48:11 -04:00
..
cli Update BouncyCastle to 1.64 (#52185) (#52464) 2020-02-18 14:11:34 +02:00
forbidden Add an OpenID Connect authentication realm (#40674) (#41178) 2019-04-15 12:41:16 +03:00
licenses Update oauth2-oidc-sdk to 7.0 (#52489) (#52806) 2020-02-26 16:02:10 +02:00
qa [7.x] Smarter copying of the rest specs and tests (#52114) (#52798) 2020-02-26 08:13:41 -06:00
src Harden search context id (#53143) 2020-03-11 11:48:11 -04:00
build.gradle Update commons-collections test dependency to 3.2.2 (#52808) (#52817) 2020-02-26 17:03:45 +02:00