OWASP / OWASP/SecurityShepherd
Fix issue with MySQL GRANTS for moduleSchema.sql
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 1.5k
- Forks
- 515
- Avg merge
- 3h 46m
- Merged PRs (30d)
- 1
Description
Currently GRANTS are hardcoded to localhost in the moduleSchema.sql
This causes issues when trying to have MySQL on a different host / IP.
Possibly these can be dynamically set from the setup.jsp screen where the user must enter the host of the DB. Possibly restricting this to IP as adding hostname lookup in MySQL slows down performance e.g.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with src/main/resources/database/moduleSchemas.sql at the referenced GRANTS, then trace how the database host is collected in setup.jsp. Review docker/mysql/Dockerfile and the linked MySQL image Dockerfile to understand the hostname-resolution concern. Done means MySQL can run on a non-local host without hardcoded localhost grants, with the intended host restriction documented or tested.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, mysql
- Domain
- database
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100