CaravanStudios / open-product-recovery

Apache License 2.0
26 stars 20 forks source link

Update postgrestestinglauncher.ts #97

Open lucioerlan opened 1 year ago

lucioerlan commented 1 year ago

security issue fix

the initDb method has a security problem because it is using the "trust" parameter when initializing the database. This parameter allows any user to connect to the database without providing a password.

To solve this problem you can change the "trust" parameter to a more secure authentication method, such as "password". Then you would need to supply the correct credentials when you initialize the database.

Note that for this solution to work correctly, you also need to create a user with proper permissions on the database and provide your credentials when you connect to the database.

It's a good idea to open an issue first for discussion.

rvenables commented 7 months ago

Hiya lucioerlan, do you mind updating the formatting on this one (see eslint for project)?