From f46e70d4b0588fe6fe5c090ab38353c0d49e68aa Mon Sep 17 00:00:00 2001
From: John MacFarlane <jgm@berkeley.edu>
Date: Mon, 15 Aug 2022 23:16:50 -0700
Subject: [PATCH] Small improvements to pandoc-server.md.

---
 server/pandoc-server.md | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/server/pandoc-server.md b/server/pandoc-server.md
index 9d6624c29..205d6b710 100644
--- a/server/pandoc-server.md
+++ b/server/pandoc-server.md
@@ -15,6 +15,21 @@ conversions.  It can be used either as a running server
 or as a CGI program.  To use `pandoc-server` as a CGI
 program, rename it as `pandoc-server.cgi`.
 
+All pandoc functions are run in the PandocPure monad, which
+ensures that they can do no I/O operations on the server.
+This should provide a high degree of security.  It does,
+however, impose certain limitations:
+
+- Resources cannot be fetched via HTTP.
+
+- PDFs cannot be produced.
+
+- Filters are not supported.
+
+- Any images, include files, or other resources needed for
+  the document conversion must be explicitly included in
+  the request, via the `files` field (see below under API).
+
 # OPTIONS
 
 `--port NUM`
@@ -67,6 +82,7 @@ values.
     specified on the pandoc command line.
 
 
+
 ``` TODO
 wrapText              :: Maybe WrapOption
 columns               :: Maybe Int