From 98205e5ec795c570b1b5109d49d33eb29de71e6b Mon Sep 17 00:00:00 2001
From: Mark Baker <mark@lange.demon.co.uk>
Date: Fri, 21 Feb 2014 09:56:57 +0000
Subject: [PATCH] Warning in security docs

---
 Documentation/markdown/ReadingSpreadsheetFiles/02-Security.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Documentation/markdown/ReadingSpreadsheetFiles/02-Security.md b/Documentation/markdown/ReadingSpreadsheetFiles/02-Security.md
index ee964643..5c8cf990 100644
--- a/Documentation/markdown/ReadingSpreadsheetFiles/02-Security.md
+++ b/Documentation/markdown/ReadingSpreadsheetFiles/02-Security.md
@@ -19,4 +19,6 @@ Should you ever need to change these settings, the following method is available
 PHPExcel_Settings::setLibXmlLoaderOptions();
 ```
 
-Allowing you to specify the XML loader settings that you want to use instead.
+Allowing you to specify the XML loader settings that those that you want to use instead.
+
+ > While PHPExcel protects you with its default settings, if you do change these settings yourself, then you're responsible for ensuring that your XML-based formats aren't open to XXE injection.