summaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
Diffstat (limited to 'README.md')
-rw-r--r--README.md1
1 files changed, 1 insertions, 0 deletions
diff --git a/README.md b/README.md
index f9d3df1..30da8c2 100644
--- a/README.md
+++ b/README.md
@@ -330,6 +330,7 @@ For instance:
automatically convert the document into HTML on the server,
and embed the HTML into your website,
this may allow arbitrary files on the server to be read and exfiltrated.
+
To avoid this issue, access to any such external files is disabled by default.
To enable access when converting trusted source documents,
call `enableExternalFileAccess()`.