web commit by joey: wikilink escaping supported now

[git.ikiwiki.info.git] / doc / security.mdwn

diff --git a/doc/security.mdwn b/doc/security.mdwn
index e34dc5ed4c4cdb6da5e9d6399ad5ccec1afacbcb..278bad024101bae6babb487db7e22cc09583c7d9 100644 (file)
--- a/doc/security.mdwn
+++ b/doc/security.mdwn
@@ -63,6 +63,12 @@ If someone checks in a symlink to /etc/passwd, ikiwiki would publish that.
 To aoid this, ikiwiki will need to avoid reading files that are symlinks.
 TODO and note discussion of races above.
 
+## setup files
+
+Setup files are not safe to keep in subversion with the rest of the wiki.
+Just don't do it. [[ikiwiki.setup]] is *not* used as the setup file for
+this wiki, BTW.
+
 ----
 
 # Hopefully non-holes