sec

Author: KevLehman

docker-compose-ci.yml

@@ -59,7 +59,6 @@ services:
       - MONGO_URL=mongodb://mongo:27017/rocketchat?replicaSet=rs0
       - 'TRANSPORTER=${TRANSPORTER:-}'
       - MOLECULER_LOG_LEVEL=info
-      - LOG_LEVEL=${DEBUG_LOG_LEVEL:-0}
     extra_hosts:
       - 'host.docker.internal:host-gateway'
     depends_on:
@@ -80,7 +79,6 @@ services:
       - MONGO_URL=mongodb://mongo:27017/rocketchat?replicaSet=rs0
       - 'TRANSPORTER=${TRANSPORTER:-}'
       - MOLECULER_LOG_LEVEL=info
-      - LOG_LEVEL=${DEBUG_LOG_LEVEL:-0}
     extra_hosts:
       - 'host.docker.internal:host-gateway'
     depends_on:
@@ -101,7 +99,6 @@ services:
       - MONGO_URL=mongodb://mongo:27017/rocketchat?replicaSet=rs0
       - 'TRANSPORTER=${TRANSPORTER:-}'
       - MOLECULER_LOG_LEVEL=info
-      - LOG_LEVEL=${DEBUG_LOG_LEVEL:-0}
     extra_hosts:
       - 'host.docker.internal:host-gateway'
     depends_on:
@@ -122,7 +119,6 @@ services:
       - MONGO_URL=mongodb://mongo:27017/rocketchat?replicaSet=rs0
       - 'TRANSPORTER=${TRANSPORTER:-}'
       - MOLECULER_LOG_LEVEL=info
-      - LOG_LEVEL=${DEBUG_LOG_LEVEL:-0}
     extra_hosts:
       - 'host.docker.internal:host-gateway'
     depends_on:
@@ -149,7 +145,6 @@ services:
       - MONGO_URL=mongodb://mongo:27017/rocketchat?replicaSet=rs0
       - 'TRANSPORTER=${TRANSPORTER:-}'
       - MOLECULER_LOG_LEVEL=info
-      - LOG_LEVEL=${DEBUG_LOG_LEVEL:-0}
     extra_hosts:
       - 'host.docker.internal:host-gateway'
     depends_on:
@@ -171,7 +166,6 @@ services:
       - MONGO_URL=mongodb://mongo:27017/rocketchat?replicaSet=rs0
       - 'TRANSPORTER=${TRANSPORTER:-}'
       - MOLECULER_LOG_LEVEL=info
-      - LOG_LEVEL=${DEBUG_LOG_LEVEL:-0}
     extra_hosts:
       - 'host.docker.internal:host-gateway'
     depends_on:

ee/packages/abac/src/clients/virtru/VirtruClient.ts

@@ -34,6 +34,7 @@ export class VirtruClient {
 			const response = await serverFetch(`${this.config.baseUrl}/healthz`, {
 				method: 'GET',
 				timeout: HEALTH_CHECK_TIMEOUT,
+				// SECURITY: This can only be configured by users with enough privileges. It's ok to disable this check here.
 				ignoreSsrfValidation: true,
 			});
 

yarn.lock

@@ -8849,7 +8849,6 @@ __metadata:
   dependencies:
     "@rocket.chat/core-services": "workspace:^"
     "@rocket.chat/core-typings": "workspace:^"
-    "@rocket.chat/license": "workspace:^"
     "@rocket.chat/logger": "workspace:^"
     "@rocket.chat/models": "workspace:^"
     "@rocket.chat/server-fetch": "workspace:^"