Added a warning regarding risks in serving user uploaded media.

Thanks Preston Holmes for the draft text.

1 files changed, 6 insertions, 0 deletions

diff --git a/docs/ref/settings.txt b/docs/ref/settings.txt
index b9a7fd1a81..c99a7e4347 100644
--- a/docs/ref/settings.txt
+++ b/docs/ref/settings.txt
@@ -1483,6 +1483,12 @@ Example: ``"http://media.example.com/"``
 
 .. warning::
 
+    There are security risks if you are accepting uploaded content from
+    untrusted users! See the security guide's topic on
+    :ref:`user-uploaded-content-security` for mitigation details.
+
+.. warning::
+
     :setting:`MEDIA_URL` and :setting:`STATIC_URL` must have different
     values. See :setting:`MEDIA_ROOT` for more details.