You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Connector/NET 8.0.16 added the AllowLoadLocalInfile connection string option:
Default: false
Disables (by default) or enables the server functionality to load the data local infile.
This clears (sets) the ProtocolCapabilities.LocalFiles bit in the initial handshake. It should also cause the client to reject any request (from the server) to load a local file.
MySqlConnector already has a mitigation for this vulnerability: #334. However, it may still be best to follow the latest MySQL security guidance and offer defense in depth by adding this connection string option.
The text was updated successfully, but these errors were encountered:
Connector/NET 8.0.16 added the
AllowLoadLocalInfile
connection string option:This clears (sets) the
ProtocolCapabilities.LocalFiles
bit in the initial handshake. It should also cause the client to reject any request (from the server) to load a local file.This is a security precaution.
MySqlConnector already has a mitigation for this vulnerability: #334. However, it may still be best to follow the latest MySQL security guidance and offer defense in depth by adding this connection string option.
The text was updated successfully, but these errors were encountered: