Add warning about WAGTAILFORMS_HELP_TEXT_ALLOW_HTML

Conflicts: docs/advanced_topics/settings.rst
wagtail · Jul 20, 2020 · f437ba4 · f437ba4
1 parent 0b80aee
commit f437ba4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/docs/advanced_topics/settings.rst b/docs/advanced_topics/settings.rst
@@ -673,6 +673,9 @@ Form builder
 
 When true, HTML tags in form field help text will be rendered unescaped (default: False).
 
+.. WARNING::
+   Enabling this option will allow editors to insert arbitrary HTML into the page, such as scripts that could allow the editor to acquire administrator privileges when another administrator views the page. Do not enable this setting unless your editors are fully trusted.
+
 
 URL Patterns
 ~~~~~~~~~~~~