summaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
authorMichael Williamson <mike@zwobble.org>2025-11-20 15:56:45 +0000
committerMichael Williamson <mike@zwobble.org>2025-11-20 15:56:45 +0000
commit076de3f0567b44e349f7f7af99e5c4ad215646a2 (patch)
tree7e83c40fd37aa8d7c8586af9c464135968e1311f /README.md
parent49105a4ae164dda057b4b883f19533048278138d (diff)
Handle hyperlinked wp:anchor and wp:inline elements
Diffstat (limited to 'README.md')
-rw-r--r--README.md1
1 files changed, 1 insertions, 0 deletions
diff --git a/README.md b/README.md
index f9d3df1..30da8c2 100644
--- a/README.md
+++ b/README.md
@@ -330,6 +330,7 @@ For instance:
automatically convert the document into HTML on the server,
and embed the HTML into your website,
this may allow arbitrary files on the server to be read and exfiltrated.
+
To avoid this issue, access to any such external files is disabled by default.
To enable access when converting trusted source documents,
call `enableExternalFileAccess()`.