on dec 8th , the open-source team released a configuration change and resolves this problem by explicitly disabling the use of the shell : an http payload handler .
A shell is an external protocol handler.