Credit: Hoss's idea
to be clear, i did not suggest that we should eliminate qt support from SolrDispatchFilter.
what i said in
change the example solrocnfig to use handleSelect="false"
Bonus points: someone can write a DispatchingRequestHandler that can optionally be configured with some name (such as "/select") and does nothing put look for a "qt" param and forward to the handler with that name – but it can have configuration options indicating which names are permitted (and any other names would be rejected)
my entire point was that we should leave in support for 'handleSelect="true"' exactly as it is for the multitudes of existing users who are happy using "qt" w/o any security concerns, but that we could also offer an optional DispatchingRequestHandler for people who want param based dispatching but want to limit it to only certain handlers