Opensolr Changelog

Service availability by country. For security and compliance reasons, Opensolr accounts can no longer be created from, and payment methods can no longer be added from, the following countries: Albania, Bangladesh, Belarus, Bulgaria, Cambodia, Hong Kong, Indonesia, Iran, Iraq, Israel, Japan, Kuwait, Liechtenstein, Moldova, Pakistan, Romania, Russia, Singapore, Switzerland, Syria, Turkey, Ukraine, and Vietnam. Existing accounts are not affected. If you are based in one of these countries and you need an Opensolr index, this is not a final no — please reach out to us directly through our contact page and we will review your case individually and set your account up by hand.

Fleet-wide Solr security hardening. We have patched a potential security issue affecting older Apache Solr versions and strengthened server-side request controls across our entire Solr infrastructure. The update was rolled out to every server automatically — no customer action is required, and your indexes and data are unaffected.

3-round security audit on the Drupal module: XSS protection on AI streaming output (DOMParser sanitizer), Solr injection prevention on range filters and facet values, CSRF on all admin write endpoints, and safe URL generation in CLI/cron context. 35+ issues found and fixed across all module files.