Search Lucene API uses the list of fields in the index as the whitelist, but it should use the fields defined in hook_luceneapi_sortable_fields() implementations instead. This will prevent users from being able to sort by fields that shouldn't be sortable.
Comments
Comment #1
cpliakas commentedFixed in commit #314118.