My requirement is that Solr admin should not display any sensitive information for hackers to utilise.
I would like to suppress calls to java properties and cores (URLs given below). Means I don't want Solr return results for these URLs.
Does anyone know which handler handles these calls ( I commented out the admin handler, see below, in SolrConfig.xml. But no luck ). Or any other mechanism to stop returning java properties /cores information?
<requestHandler name="/admin/" class="solr.admin.AdminHandlers" />