status-im
/
consul
mirror of https://github.com/status-im/consul.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

docs: add warning in 0.9.0 upgrade notes

This commit is contained in:
Joel Watson 2020-11-10 16:01:34 -06:00 committed by hashicorp-ci
parent b3368b8ee7
commit 85595ab3ea
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
website/pages/docs/upgrading/upgrade-specific.mdx
View File

@ -593,6 +593,11 @@ as part of upgrading agents. If this is set to `true`, you should also enable
to provide control over which users are allowed to register health checks that to provide control over which users are allowed to register health checks that
could potentially execute scripts on the agent machines. could potentially execute scripts on the agent machines.
!> **Security Warning:** Using `enable_script_checks` without ACLs and without
`allow_write_http_from` is _DANGEROUS_. Use the `enable_local_script_checks` setting
introduced in v0.9.4 instead. See [this article](https://www.hashicorp.com/blog/protecting-consul-from-rce-risk-in-specific-configurations/)
for more information.
#### Web UI Is No Longer Released Separately #### Web UI Is No Longer Released Separately
Consul releases will no longer include a `web_ui.zip` file with the compiled Consul releases will no longer include a `web_ui.zip` file with the compiled