Hey everyone, I want to start a discussion about deprecating and eventually removing the <lib> functionality in solrconfig.xml.
There are a number of ways to install custom code for Solr, all documented here: https://solr.apache.org/guide/solr/latest/configuration-guide/solr-plugins.html Letting users define "arbitrary" places to load code from at run-time is pretty problematic, and where a lot of our security issues come from. Given the numerous ways we give users to load custom code when starting Solr, do we need to keep these <lib> options around? - Houston
