Disable remote database creation by default#1726
Conversation
…to isuruperera-master
And add an -ifNotExists option to turn on the permissive behaviour Related to https://www.exploit-db.com/exploits/45506 even though we document that you should set this in http://www.h2database.com/html/advanced.html#remote_access people turn on network access but don't turn on -ifExists.
it needs -ifNotExists since it tests for creating a DB automatically
|
Why Preferences and Tools on top of H2 Console are available for everyone? There is an |
I've never even noticed those before. git doesn't show anything interesting, so no idea |
|
Settings and tools now require authentication, I used old When preferences of H2 Console are saved passwords are always stored as hash with salt. Documentation contains brief mention of parameter with password. In fresh installation there is no password, so settings and tools are not accessible. H2 Console definitely needs more attention. |
2 participants
Based on #1580 from @grandinj.