From 2cc93c87c18a615152aa5dcb8f554e3f212d1099 Mon Sep 17 00:00:00 2001
From: John MacFarlane <jgm@berkeley.edu>
Date: Wed, 15 Jun 2022 16:07:27 -0600
Subject: [PATCH] MANUAL: add note to `--sandbox` about `embed_data_files`.

See #8128.
---
 MANUAL.txt | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/MANUAL.txt b/MANUAL.txt
index 34b87c93e..6e94962a7 100644
--- a/MANUAL.txt
+++ b/MANUAL.txt
@@ -759,6 +759,14 @@ header when requesting a document from a URL:
     through the use of `include` directives.  Anyone using
     pandoc on untrusted user input should use this option.
 
+    Note: some readers and writers (e.g., `docx`) need access to data
+    files.  If these are stored on the file system, then pandoc
+    will not be able to find them when run in `--sandbox` mode
+    and will raise an error. For these applications, we
+    recommend using a pandoc binary compiled with the `embed_data_files`
+    option, which causes the data files to be baked into the binary
+    instead of being stored on the file system.
+
 `-D` *FORMAT*, `--print-default-template=`*FORMAT*
 
 :   Print the system default template for an output *FORMAT*. (See `-t`