David Yaffe 84f9324395 fix(Security): Apply patch update 0.9.2 to main (#6907) ...

* Restrict Kafka client params that execute commands or load libraries

Kafka source configs can be submitted through the REST API, so they should not be able to make librdkafka run shell commands or load native libraries. Kerberos ticket refresh is now opt-in through the operator-set `QW_KAFKA_KINIT_CMD` environment variable.

* Bump tantivy to e1acb3e

* Bump version to 0.9.2

* Add security note to REST API docs

* Treat an empty QW_KAFKA_KINIT_CMD as unset

An empty or whitespace-only value now behaves like an unset variable and keeps Kerberos ticket refresh disabled.

2026-10-19 15:03:05 +00:00

..

_category_.yaml

Move ingest data tutorials in dedicated sections, improve navigation. (#2948)

2023-03-07 17:41:29 +01:00

index.md

Review log management docs structure. (#3032)

2023-03-16 17:15:03 +01:00

ingest-api.md

Fix the docs for json and dynamic fields (#5684)

2025-02-20 17:44:55 +09:00

ingest-local-file.md

Add File source with SQS notifications (#5148)

2024-07-31 12:18:09 +02:00

kafka.md

fix(Security): Apply patch update 0.9.2 to main (#6907)

2026-10-19 15:03:05 +00:00

kinesis.md

Bump 0.7.0. (#4337)

2024-01-03 18:55:41 +01:00

pulsar.md

Bump 0.7.0. (#4337)

2024-01-03 18:55:41 +01:00

sqs-files.md

Add File source with SQS notifications (#5148)

2024-07-31 12:18:09 +02:00