{{ message }}
Repository navigation
Remove shared fallback credentials from usage and execution database connections #14678
Description
Semgrep findings #3830, #3831 identify the same _APP_USAGE_PASS fallback in two connection factories in app/init/resources.php. Both silently use appwrite when unset. The DSN defaults to internal ClickHouse; risk depends on deployment network reachability and provisioned credentials, so this is configuration hardening rather than a demonstrated public endpoint exploit.
Plan a compatible transition: provision per-install credentials, pass explicit connection DSNs/secrets, and fail clearly or disable the feature when credentials are absent. Verify fresh installs and upgrades before removing defaults. Do not simply remove the fallback and break existing deployments.
Activity