UNCLASSIFIED - NO CUI

Healthcheck fails

Summary

The Redis heathcheck is failing. docker ps shows "unhealthy", and I get a log error that says "Possible SECURITY ATTACK detected. It looks like somebody is sending POST or Host: commands to Redis. This is likely due to an attacker attempting to use Cross Protocol Scripting to compromise your Redis instance. Connection aborted."

For the record, the Redis service is still up and running, and working as expected (except for the heathcheck).

Steps to reproduce

The issue occurs after I docker-compose up. My docker-compose.yml looks like this:

  vibeCheckRedis:
    container_name: vibe_check_redis
    image: ${vibe_check_redis_image}
    environment:
      - ALLOW_EMPTY_PASSWORD=yes
    networks:
      - vibe_check_network
    healthcheck:
      test: curl -fs http://vibeCheckRedis:6379 || exit 1

I have tried the default healthcheck (curl -fs http://localhost:6379 || exit 1) with similar results.

Relevant logs and/or screenshots

vibe_check_redis     | 1:M 08 Sep 2021 13:01:05.969 # Possible SECURITY ATTACK detected. It looks like somebody is sending POST or Host: commands to Redis. This is likely due to an attacker attempting to use Cross Protocol Scripting to compromise your Redis instance. Connection aborted.
vibe_check_redis     | 1:M 08 Sep 2021 13:02:08.623 # Possible SECURITY ATTACK detected. It looks like somebody is sending POST or Host: commands to Redis. This is likely due to an attacker attempting to use Cross Protocol Scripting to compromise your Redis instance. Connection aborted.
vibe_check_redis     | 1:M 08 Sep 2021 13:03:11.245 # Possible SECURITY ATTACK detected. It looks like somebody is sending POST or Host: commands to Redis. This is likely due to an attacker attempting to use Cross Protocol Scripting to compromise your Redis instance. Connection aborted.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information