docs: add warning in 0.9.0 upgrade notes

This commit is contained in:
Joel Watson 2020-11-10 16:01:34 -06:00 committed by Mike Morris
parent 3760e3d12d
commit 2e654a1759
1 changed files with 5 additions and 0 deletions

View File

@ -593,6 +593,11 @@ as part of upgrading agents. If this is set to `true`, you should also enable
to provide control over which users are allowed to register health checks that
could potentially execute scripts on the agent machines.
!> **Security Warning:** Using `enable_script_checks` without ACLs and without
`allow_write_http_from` is _DANGEROUS_. Use the `enable_local_script_checks` setting
introduced in v0.9.4 instead. See [this article](https://www.hashicorp.com/blog/protecting-consul-from-rce-risk-in-specific-configurations/)
for more information.
#### Web UI Is No Longer Released Separately
Consul releases will no longer include a `web_ui.zip` file with the compiled