When I visit a Solr URL such as:
http://solrserver:8180/solr/project/data-import
The response includes the JDBC URL/username/password that was passed into DataImportHandler as part of the initargs
section.
Are there any configuration options to stop this from happening, or am I going to have to look into using Apache HTTPD's mod_substitute to remove the offending line(s)?
Edit: by the way, currently we aren't fronting Solr with Apache, so if there is a Solr-only solution that is the preferable option.
Edit2: I'm not the only one with the problem