github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-01-19 16:02:45 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: Disable MessageBus::Diagnostics.

Browse Source 
MessageBus::Diagnostics allows anyone with access to carry out certain
operations that may result in a denial of service. The impact of this is
greater on multisiite clusters.
This commit is contained in:
Alan Guo Xiang Tan 2021-12-17 14:24:32 +08:00
parent 30bc65af70
commit 7a8ec129fb
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config/initializers/004-message_bus.rb
View File

@ -120,7 +120,6 @@ MessageBus.reliable_pub_sub.max_backlog_size = GlobalSetting.message_bus_max_bac
MessageBus.long_polling_enabled = SiteSetting.enable_long_polling
MessageBus.long_polling_interval = SiteSetting.long_polling_interval
MessageBus.cache_assets = !Rails.env.development?
MessageBus.enable_diagnostics
if Rails.env == "test" || $0 =~ /rake$/
# disable keepalive in testing