luxolus
/
open-consul
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity

docs: add warning in 0.9.0 upgrade notes

This commit is contained in:
Joel Watson 2020-11-10 16:01:34 -06:00 committed by Mike Morris
parent e033ad896a
commit 1dd5362620
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
website/pages/docs/upgrading/upgrade-specific.mdx
View File

@ -593,6 +593,11 @@ as part of upgrading agents. If this is set to `true`, you should also enable
to provide control over which users are allowed to register health checks that
could potentially execute scripts on the agent machines.
!> **Security Warning:** Using `enable_script_checks` without ACLs and without
`allow_write_http_from` is _DANGEROUS_. Use the `enable_local_script_checks` setting
introduced in v0.9.4 instead. See [this article](https://www.hashicorp.com/blog/protecting-consul-from-rce-risk-in-specific-configurations/)
for more information.
#### Web UI Is No Longer Released Separately
Consul releases will no longer include a `web_ui.zip` file with the compiled