"Possible SECURITY ATTACK detected" when deploying Redis with Docker Compose

Quentin FORTIER 1 Reputation point
2021-02-14T16:28:59.057+00:00

Hello,

I want to deploy my Flask-Celery-Redis-SocketIO web application (it works well locally).
I uploaded a docker image regmtgscan.azurecr.io/server and use the following docker-compose.yml in my deployment center settings on Azure:

services:
    redis:
        image: mcr.microsoft.com/oss/bitnami/redis:6.0.8
        ports:
            '6379:6379'
        environment:
            ALLOW_EMPTY_PASSWORD: "yes"
    flask:
        build: server
        image: regmtgscan.azurecr.io/server
        ports:
            - '5000:5000'
        links:
            - redis
    celery:
        build: server
        image: regmtgscan.azurecr.io/server
        command: "celery -A app.celery worker --loglevel=info --uid=nobody"
        links:
            - redis
        environment:
            - AZURE_VISION_KEY
            - AZURE_VISION_ENDPOINT

(Note that I am not sure on the syntax : docker-compose uses hyphen (-) when Azure does not, for example. But this is not my problem).

When I start my App Service, I see that every container is launching but I get the following error from the Redis one :

Possible SECURITY ATTACK detected. It looks like somebody is sending POST or Host: commands to Redis. This is likely due to an attacker attempting to use Cross Protocol Scripting to compromise your Redis instance. Connection aborted.

This error shut down my app. I can't access my app URL at all.
I don't understand why I get this error and how to solve it.

Can somebody help me solving this?

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,936 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.