MANUAL: Under security, added note about +RTS option to limit heap size.

See #5047.
This commit is contained in:
John MacFarlane 2018-11-15 10:10:40 -08:00
parent f393f4ba10
commit 2347babbf0

View file

@ -4885,6 +4885,9 @@ application, here are some things to keep in mind:
3. Pandoc's parsers can exhibit pathological performance on some
corner cases. It is wise to put any pandoc operations under
a timeout, to avoid DOS attacks that exploit these issues.
If you are using the pandoc executable, you can add the
command line options `+RTS -M512M -RTS` (for example) to limit
the heap size to 512MB.
4. The HTML generated by pandoc is not guaranteed to be safe.
If `raw_html` is enabled for the Markdown input, users can