L3 - Default Acceptance Criteria (Required on creation):
- For the H2 webapp, the servlet attribute webAllowOthers is set to false so that only localhost connections can use the application
- Patch and minor version update guide mention this change
Hints (optional):
- https://github.com/camunda/camunda-bpm-platform/blob/7.17.0-alpha3/distro/h2-webapp/src/main/webapp/WEB-INF/web.xml#L14-L17
- https://h2database.com/html/tutorial.html#console_settings
- As a side effect, h2 console will not be accessible when running the Tomcat or Wildfly Docker containers, because HTTP requests to those are remote requests from the container's point of view