github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

docs: add warning in 0.9.0 upgrade notes

pull/9156/head
Joel Watson 2020-11-10 16:01:34 -06:00 committed by Mike Morris
parent 3760e3d12d
commit 2e654a1759
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
website/pages/docs/upgrading/upgrade-specific.mdx
View File

@ -593,6 +593,11 @@ as part of upgrading agents. If this is set to `true`, you should also enable
to provide control over which users are allowed to register health checks that to provide control over which users are allowed to register health checks that
could potentially execute scripts on the agent machines. could potentially execute scripts on the agent machines.
!> **Security Warning:** Using `enable_script_checks` without ACLs and without
`allow_write_http_from` is _DANGEROUS_. Use the `enable_local_script_checks` setting
introduced in v0.9.4 instead. See [this article](https://www.hashicorp.com/blog/protecting-consul-from-rce-risk-in-specific-configurations/)
for more information.
#### Web UI Is No Longer Released Separately #### Web UI Is No Longer Released Separately
Consul releases will no longer include a `web_ui.zip` file with the compiled Consul releases will no longer include a `web_ui.zip` file with the compiled