[1.6.x] Added a warning regarding risks in serving user uploaded media.

Thanks Preston Holmes for the draft text.

Backport of df6760f12c from master

1 files changed, 6 insertions, 0 deletions

diff --git a/docs/ref/settings.txt b/docs/ref/settings.txt
index b4c85967c2..26258eaf6b 100644
--- a/docs/ref/settings.txt
+++ b/docs/ref/settings.txt
@@ -1442,6 +1442,12 @@ Example: ``"http://media.example.com/"``
 
 .. warning::
 
+    There are security risks if you are accepting uploaded content from
+    untrusted users! See the security guide's topic on
+    :ref:`user-uploaded-content-security` for mitigation details.
+
+.. warning::
+
     :setting:`MEDIA_URL` and :setting:`STATIC_URL` must have different
     values. See :setting:`MEDIA_ROOT` for more details.