From 660da135c950031097269f5d610e771698f99eb3 Mon Sep 17 00:00:00 2001 From: Michael Williamson Date: Wed, 10 Sep 2025 16:23:50 +0100 Subject: Recommend externalFileAccess with untrusted user input --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 442ca62..9c34147 100644 --- a/README.md +++ b/README.md @@ -379,6 +379,7 @@ Converts the source document to HTML. * `externalFileAccess`: Source documents may reference files outside of the source document. To disable access to any such external files during the conversion process, set `options.externalFileAccess` to `false`. + This is highly recommended when converting untrusted user input. * `convertImage`: by default, images are converted to `` elements with the source included inline in the `src` attribute. Set this option to an [image converter](#image-converters) to override the default behaviour. -- cgit v1.2.3