Hello.

H2 is a DBMS, it's not an HTTP server.

H2 has a simple built-in web server for H2 Console, but it shouldn't be 
used in production. If you want to have H2 Console in production, normally 
you should use the H2 Console servlet and add proper security configuration 
for it to your web server. It should be protected from unauthorized users 
with security constraints, otherwise you may create a remote security hole 
in your application, especially if you use old versions of H2. You can also 
add all necessary headers to pages served by your web server either by 
configuration of the server, if it supports it, or with custom servlet 
filter.

H2 hypothetically can be improved to send additional headers from its own 
simple HTTP server, but, again, it isn't suitable for such use cases.

-- 
You received this message because you are subscribed to the Google Groups "H2 
Database" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/h2-database/9a559a0e-1e8a-49b2-ba4e-6105b0c513bbn%40googlegroups.com.

Reply via email to