From 150bf98e7ae2fd8ae874c3e756c39f01b3c01a23 Mon Sep 17 00:00:00 2001
From: Michael Williamson <mike@zwobble.org>
Date: Wed, 10 Sep 2025 16:15:28 +0100
Subject: Support disabling external file access

---
 README.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)

(limited to 'README.md')

diff --git a/README.md b/README.md
index adc4b2f..82f4c24 100644
--- a/README.md
+++ b/README.md
@@ -178,6 +178,16 @@ pass `include_default_style_map=False`:
 result = mammoth.convert_to_html(docx_file, style_map=style_map, include_default_style_map=False)
 ```
 
+#### External file access
+
+Source documents may reference files outside of the source document.
+To disable access to any such external files during the conversion process,
+pass `external_file_access=False`:
+
+```javascript
+result = mammoth.convert_to_html(docx_file, external_file_access=False)
+```
+
 #### Custom image handlers
 
 By default, images are converted to `<img>` elements with the source included inline in the `src` attribute.
@@ -415,6 +425,9 @@ For instance:
   and embed the HTML into your website,
   this may allow arbitrary files on the server to be read and exfiltrated.
 
+  To disable access to any such external files during the conversion process,
+  pass `external_file_access=False`.
+
 ### Document transforms
 
 **The API for document transforms should be considered unstable,
-- 
cgit v1.2.3