Skip to content

Commit

Permalink
Do not allow file URLS
Browse files Browse the repository at this point in the history
  • Loading branch information
@romain-fontugne
romain-fontugne committed Aug 21, 2024
1 parent 00a3bcd commit f9481fb
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 2 deletions.
3 changes: 2 additions & 1 deletion public/conf_notls/neo4j.conf
View file
Original file line number Diff line number Diff line change
Expand Up @@ -205,7 +205,8 @@ server.http.enabled=true
# Determines if Cypher will allow using file URLs when loading data using
# `LOAD CSV`. Setting this value to `false` will cause Neo4j to fail `LOAD CSV`
# clauses that load data from the file system.
#dbms.security.allow_csv_import_from_file_urls=true
dbms.security.allow_csv_import_from_file_urls=false
dbms.security.allow_file_urls=false


# Value of the Access-Control-Allow-Origin header sent over any HTTP or HTTPS
Expand Down
3 changes: 2 additions & 1 deletion public/conf_tls/neo4j.conf
View file
Original file line number Diff line number Diff line change
Expand Up @@ -205,7 +205,8 @@ dbms.ssl.policy.https.public_certificate=neo4j.cert
# Determines if Cypher will allow using file URLs when loading data using
# `LOAD CSV`. Setting this value to `false` will cause Neo4j to fail `LOAD CSV`
# clauses that load data from the file system.
#dbms.security.allow_csv_import_from_file_urls=true
dbms.security.allow_csv_import_from_file_urls=false
dbms.security.allow_file_urls=false


# Value of the Access-Control-Allow-Origin header sent over any HTTP or HTTPS
Expand Down

0 comments on commit f9481fb

Please sign in to comment.