From 9e9f3f60889d9af4bbc87662bf1c673f50567849 Mon Sep 17 00:00:00 2001
From: AUTOMATIC1111 <16777216c@gmail.com>
Date: Fri, 4 Nov 2022 10:21:40 +0300
Subject: [PATCH] Updated Extensions (markdown)

---
 Extensions.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Extensions.md b/Extensions.md
index e14421c..73c49b2 100644
--- a/Extensions.md
+++ b/Extensions.md
@@ -14,6 +14,10 @@ Alternatively you can just copy-paste a directory into `extensions`.
 
 For developing extensions, see [Developing extensions](Developing-extensions).
 
+# Security
+
+As extensions allow the user to install and run arbitrary code, this can be used maliciously, and is disabled by default when running with options that allow remote users to connect to the server (`--share` or `--listen`) - you'll still have the UI, but trying to install anything will result in error. If you want to use those options and still be able to install extensions, use `--enable-insecure-extension-access` command line flag.
+
 # Extensions
 
 ## Aesthetic Gradients