Merge pull request #29106 from overleaf/bg-fix-capdrop-in-docker-runner

fix capdrop in docker runner

GitOrigin-RevId: 1e8c81723a9e152ec85a3a2776965891fbe07606

services/clsi/app/js/DockerRunner.js

@@ -254,7 +254,7 @@ const DockerRunner = {
             Hard: timeoutInSeconds + 10,
           },
         ],
-        CapDrop: 'ALL',
+        CapDrop: ['ALL'],
         SecurityOpt: ['no-new-privileges'],
       },
     }

services/clsi/test/unit/js/DockerRunnerTests.js

@@ -487,7 +487,7 @@ describe('DockerRunner', function () {
         return expect(options.HostConfig).to.deep.include({
           Binds: ['/some/host/dir/compiles/directory:/compile:rw'],
           LogConfig: { Type: 'none', Config: {} },
-          CapDrop: 'ALL',
+          CapDrop: ['ALL'],
           SecurityOpt: ['no-new-privileges'],
           newProperty: 'new-property',
         })