Re: [h2] Requesting guidance on RCE issue remediation

It might be worthwhile to read about the tyranny of the default. https://pagefair.com/blog/2015/the-tyranny-of-the-default/ On Sat, 3 Nov 2018, 04:39 <0xd...@gmail.com wrote: > Agreed, it's best to have secure defaults. Thanks! > > On Friday, November 2, 2018 at 2:06:55 AM UTC-4, Noel Grandin

Re: [h2] Requesting guidance on RCE issue remediation

Thanks Evgenij, these config settings should take care of the problem for me On Thursday, November 1, 2018 at 11:35:41 PM UTC-4, Evgenij Ryazanov wrote: > > Hello. > > Add -ifExists flag to your TCP server. > http://www.h2database.com/html/advanced.html#remote_access > You should not run TCP /

[h2] Open H2 Database from Classpath

Crossposting from StackOverflow as had no response - https://stackoverflow.com/questions/53088525/open-h2-database-from-classpath I've seen from the H2 documentation that you can open files on the classpath . I've tried various URLs

Re: [h2] Requesting guidance on RCE issue remediation

It's not unreasonable to make downstream users safer by making -ifExists the default for the TCP server mode. -- You received this message because you are subscribed to the Google Groups "H2 Database" group. To unsubscribe from this group and stop receiving emails from it, send an email to