I'm just scratching the surface of ES, so apologies if this is pedantic...
I've got it installed on my dev server, created an index, can get results on the command line, have a basic understanding of how it works. All good there.
My ultimate idea is to use it for site search. Which means I'll need to access ES results from the web somehow.
On this page a guy is describing how to pass it thru different server application layers:
https://adambard.com/blog/elasticsearch-rosetta-stone/
Which makes sense if you're already using one of those on your webserver. But it looks like one of the possibilities is javascript. Using pure javascript makes sense because ES returns json which is easily handled by jquery. But I would think in that instance that 9200 would have to be open to the public. Which is obviously dangerous because of updates and deletes. OR are we talking server-side javascript here?
What I am getting at is, is it possible to safely access ES results with no server side abstraction layer?
or is this a really ugly newb question that indicates a total misunderstanding of the technology?