From 53232d3b616877e0db87c7f01e2f199f03a0c357 Mon Sep 17 00:00:00 2001
From: Yassine Doghri <yassine@doghri.fr>
Date: Mon, 8 Jul 2024 14:06:56 +0000
Subject: [PATCH] docs(security): add disclaimer aside to third-party plugins
 section

---
 docs/src/content/docs/en/getting-started/security.mdx | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docs/src/content/docs/en/getting-started/security.mdx b/docs/src/content/docs/en/getting-started/security.mdx
index 90d6f66b..cb5442c7 100644
--- a/docs/src/content/docs/en/getting-started/security.mdx
+++ b/docs/src/content/docs/en/getting-started/security.mdx
@@ -2,6 +2,8 @@
 title: Security concerns
 ---
 
+import { Aside } from "@astrojs/starlight/components";
+
 Castopod is built on top of [CodeIgniter4](https://codeigniter.com/), a PHP
 framework that encourages
 [good security practices](https://codeigniter.com/user_guide/concepts/security.html).
@@ -25,6 +27,12 @@ sudo chown -R www-data:www-data /path/to/castopod/public/media
 
 ## Third-party Plugins
 
+<Aside type="caution" title="Disclaimer">
+  Installing untrusted third-party plugins on Castopod carries inherent security
+  risks, such as unauthorized access to sensitive user data, data breaches, data
+  tampering, and injecting malicious code.
+</Aside>
+
 Since v2's [Plugins Architecture](../../plugins), Castopod can be extended with
 all sorts of cool features. Anyone can choose to create their own plugins and
 even share them with the community.