From 64ac6f71844df66c0c52254ad0426b2394fa5faf Mon Sep 17 00:00:00 2001
From: Stephen Williams <stephenwilliams@salesforce.com>
Date: Tue, 23 May 2017 12:45:37 -0400
Subject: [PATCH] add repeater dataSource security note

---
 _includes/js/repeater.html | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/_includes/js/repeater.html b/_includes/js/repeater.html
index b26374d6e..8af2b9407 100644
--- a/_includes/js/repeater.html
+++ b/_includes/js/repeater.html
@@ -565,6 +565,17 @@ <h3 id="repeater-dataSource">Data Source</h3>
   </div><!-- ./fu-table-responsive -->
   <p>The default values are <code>{ count: 0, end: 0, items: [], page: 0, pages: 1, start: 0 }</code>.</p>
 
+  <div class="fu-callout fu-callout-warning">
+    <h4 id="repeater-dataSource-security">Security</h4>
+    <p>
+      Use the <code>dataSource</code> method to keep your page safe from XSS.
+      <ul>
+        <li>Do not include markup in the <code>data</code> object argument passed to <code>dataSource</code>'s <code>callback</code> function.</li>
+        <li>Use the <code>cleanInput</code> utility while gathering your data use the data is safely encoded.</li>
+      </ul>
+    </p>
+  </div>
+
   <h3 id="repeater-usage-events">Events</h3>
   <div class="table-responsive">
     <table class="table table-bordered table-striped">