Self-hosters left vulnerable to XSS vuln due to second-class Docker support

From looking at the Docker Compose file, that’s the way it appears to me.