Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

adding health warning about insecure protocols for LOAD CSV #1006

Merged
merged 4 commits into from
Aug 12, 2024
Merged

adding health warning about insecure protocols for LOAD CSV #1006

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
16c0585
adding health warning about insecure protocols
phil198 Jul 18, 2024
676e1f2
typo
phil198 Jul 19, 2024
2571608
Update modules/ROOT/pages/clauses/load-csv.adoc
JPryce-Aklundh Aug 12, 2024
2f125b8
Merge branch 'dev' into warn-insecure-protocols
JPryce-Aklundh Aug 12, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions modules/ROOT/pages/clauses/load-csv.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -90,6 +90,12 @@ You can import data from a CSV file hosted on a remote path.
`LOAD CSV` supports accessing CSV files via HTTPS, HTTP, and FTP (with or without credentials).
It also follows redirects, except those changing the protocol (for security reasons).

[IMPORTANT]
====
It strongly recommended to only allow secure protocols like HTTPS in favour of allowing insecure protocols like HTTP. If allowing an insecure protocol is completely unavoidable, then Neo4j internally takes some measures to make these requests as secure as possible within their limitations. However, this means that insecure URLs which are located somewhere which uses virtual hosting will not work. The only way to load an insecure resource from a virtually hosted URL is to add the JVM argument `-Dsun.net.http.allowRestrictedHeaders=true` to the link:{neo4j-docs-base-uri}/operations-manual/{page-version}/configuration/configuration-settings/#config_server.jvm.additional/[jvm.additional] config setting. For the sake of security, it is strongly recommended that this be avoided at all cost and that you only permit loading of resources over secure protocols. This can be achieved by limiting link:{neo4j-docs-base-uri}/operations-manual/{page-version}/authentication-authorization/load-privileges/#access-control-load-cidr/[load privileges] to trusted sources that use secure protocols.
====


.Import artists name and year information from a remote file via HTTPS
====

Expand Down