diff --git a/MANUAL.txt b/MANUAL.txt index 815ed0fdf..c5dba29f3 100644 --- a/MANUAL.txt +++ b/MANUAL.txt @@ -6504,9 +6504,9 @@ application, here are some things to keep in mind: 4. The HTML generated by pandoc is not guaranteed to be safe. If `raw_html` is enabled for the Markdown input, users can inject arbitrary HTML. Even if `raw_html` is disabled, - users can include dangerous content in attributes for - headings, spans, and code blocks. To be safe, you should - run all the generated HTML through an HTML sanitizer. + users can include dangerous content in URLs and attributes. + To be safe, you should run all the generated HTML through + an HTML sanitizer. # Authors