SECURITY: Disable MessageBus::Diagnostics.

MessageBus::Diagnostics allows anyone with access to carry out certain operations that may result in a denial of service. The impact of this is greater on multisiite clusters.
2021-12-17 14:24:32 +08:00 · 2021-12-17 14:24:32 +08:00 · bd034485d7
parent e6480bbb04
commit bd034485d7
1 changed files with 0 additions and 1 deletions
--- a/config/initializers/004-message_bus.rb
+++ b/config/initializers/004-message_bus.rb
@ -130,7 +130,6 @@ else
 end

 MessageBus.cache_assets = !Rails.env.development?
-MessageBus.enable_diagnostics

 if Rails.env == "test" || $0 =~ /rake$/
  # disable keepalive in testing