From 961268446c551e43b43cd3dffaf0f3c6be4dfa6f Mon Sep 17 00:00:00 2001 From: John MacFarlane Date: Mon, 14 Jun 2021 12:35:44 -0700 Subject: Rephrase section on unsafe HTML in manual. --- MANUAL.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'MANUAL.txt') diff --git a/MANUAL.txt b/MANUAL.txt index 815ed0fdf..c5dba29f3 100644 --- a/MANUAL.txt +++ b/MANUAL.txt @@ -6504,9 +6504,9 @@ application, here are some things to keep in mind: 4. The HTML generated by pandoc is not guaranteed to be safe. If `raw_html` is enabled for the Markdown input, users can inject arbitrary HTML. Even if `raw_html` is disabled, - users can include dangerous content in attributes for - headings, spans, and code blocks. To be safe, you should - run all the generated HTML through an HTML sanitizer. + users can include dangerous content in URLs and attributes. + To be safe, you should run all the generated HTML through + an HTML sanitizer. # Authors -- cgit v1.2.3