mirror of
https://github.com/django/django.git
synced 2025-10-24 06:06:09 +00:00
Added a warning regarding risks in serving user uploaded media.
Thanks Preston Holmes for the draft text.
This commit is contained in:
@@ -1481,6 +1481,12 @@ to a non-empty value.
|
||||
|
||||
Example: ``"http://media.example.com/"``
|
||||
|
||||
.. warning::
|
||||
|
||||
There are security risks if you are accepting uploaded content from
|
||||
untrusted users! See the security guide's topic on
|
||||
:ref:`user-uploaded-content-security` for mitigation details.
|
||||
|
||||
.. warning::
|
||||
|
||||
:setting:`MEDIA_URL` and :setting:`STATIC_URL` must have different
|
||||
|
||||
Reference in New Issue
Block a user