Re: [h2] Re: Getting vulnerability as HTTP header not detected,

2020-11-24 Thread Evgenij Ryazanov
You can't add anything to build-in server of H2. Just don't use it in production. If you're using a some other web server (Tomcat, Jetty, etc.) and H2 Console servlet on it, you can add a javax.servlet.Filter implementation with @javax.servlet.annotation.WebFilter annotation and add all

[h2] Re: Getting vulnerability as HTTP header not detected,

2020-11-24 Thread Evgenij Ryazanov
Hello. H2 is a DBMS, it's not an HTTP server. H2 has a simple built-in web server for H2 Console, but it shouldn't be used in production. If you want to have H2 Console in production, normally you should use the H2 Console servlet and add proper security configuration for it to your web

Re: [h2] Re: Getting vulnerability as HTTP header not detected,

2020-11-24 Thread Suraj Patil
How can we add headers in h2 configurations? On Tue, 24 Nov 2020, 15:47 Evgenij Ryazanov, wrote: > Hello. > > H2 is a DBMS, it's not an HTTP server. > > H2 has a simple built-in web server for H2 Console, but it shouldn't be > used in production. If you want to have H2 Console in production,

Re: [h2] Re: Fun with URIs and Windows: jdbc:h2:C:/ vs. jdbc:h2:/C:/

2020-11-24 Thread Andreas Reichel
Thank you for explaining it, Evgenji. I understand you argument, after all Oracle or SQL Server would not point to a File either and in fact it is on the discretion of the DB, how to deal with the connection string. That said:  jdbc:h2:file: looks a lot like a Url/Uri. And I would always try  

Re: [h2] Re: Fun with URIs and Windows: jdbc:h2:C:/ vs. jdbc:h2:/C:/

2020-11-24 Thread Noel Grandin
On Tue, 24 Nov 2020 at 18:37, Andreas Reichel < andr...@manticore-projects.com> wrote: > > So I wonder: should we not try to accept valid Uris at least for the > jdbc:h2:file: and jdbc:h2:nio: variants? > Would you consider PRs covering that? > > Sorry, but noo, a JDBC connection string is not

Re: [h2] Re: Fun with URIs and Windows: jdbc:h2:C:/ vs. jdbc:h2:/C:/ --> Closed.

2020-11-24 Thread Andreas Reichel
On Tue, 2020-11-24 at 19:17 +0200, Noel Grandin wrote: > Sorry, but noo, a JDBC connection string is not a valid URI, and does > not follow that syntax.  > We also don't need to make it's existing syntax any more complicated. Thank you for the clarification, Noel. I understand your argument and

[h2] Re: Fun with URIs and Windows: jdbc:h2:C:/ vs. jdbc:h2:/C:/

2020-11-24 Thread Evgenij Ryazanov
Hello. JDBC connection URLs for H2 aren't related with URIs in any way. jdbc:h2:, jdbc:h2:file:, and jdbc:h2:nio: mean the same in the current H2 and there are no good reasons to use file: or nio: prefixes. In older versions they were different (and they also were different between PageStore

[h2] Fun with URIs and Windows: jdbc:h2:C:/ vs. jdbc:h2:/C:/

2020-11-24 Thread Andreas Reichel
Dear All, compliments. I have a hard time with URIs under Windows (simply because I do not know this OS very well.) In our own Java code, all URIs are defined as: groovy> URI uri = new URI("file:/C:/Users/manticore/.manticore/ifrsbox"); groovy> File f = new File(uri); Result: