From 2d226bd2a8b2100d67a29f1696d35abcd290bc33 Mon Sep 17 00:00:00 2001 From: Michael Williamson Date: Fri, 19 Sep 2025 14:22:05 +0100 Subject: Add docs for external file access --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index 968d5e9..8235b6e 100644 --- a/README.md +++ b/README.md @@ -250,6 +250,10 @@ Methods: if the document contains an embedded style map, then it is combined with the default style map. Call this to ignore any embedded style maps. +* `DocumentConverter EnableExternalFileAccess()`: Source documents may reference files outside of the source document. + Access to any such external files is disabled by default. + Call this to enable access when converting trusted source documents. + * `DocumentConverter PreserveEmptyParagraphs()`: by default, empty paragraphs are ignored. Call this to preserve empty paragraphs in the output. @@ -321,6 +325,10 @@ For instance: and embed the HTML into your website, this may allow arbitrary files on the server to be read and exfiltrated. + To avoid this issue, access to any such external files is disabled by default. + To enable access when converting trusted source documents, + call `EnableExternalFileAccess()`. + ## Writing style maps A style map is made up of a number of style mappings separated by new lines. -- cgit v1.2.3