From 40908866f2f26eebf1288f43978450fbfcf06af9 Mon Sep 17 00:00:00 2001
From: Krzysztof Wicher <kwicher@microsoft.com>
Date: Thu, 10 Apr 2025 17:16:43 +0200
Subject: [PATCH] Update docs for JScriptEvaluate (#11180)

---
 xml/Microsoft.JScript/Eval.xml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/xml/Microsoft.JScript/Eval.xml b/xml/Microsoft.JScript/Eval.xml
index 935978c1b41..aca81c7c7c3 100644
--- a/xml/Microsoft.JScript/Eval.xml
+++ b/xml/Microsoft.JScript/Eval.xml
@@ -84,7 +84,13 @@
       </Parameters>
       <Docs>
         <param name="source">The code to evaluate.</param>
-        <param name="unsafeOption">The string literal <c>unsafe</c> to enable unsafe evaluation; otherwise, <see langword="false" />.</param>
+        <param name="unsafeOption">
+          The string literal <c>unsafe</c> to enable unsafe evaluation; otherwise, <see langword="false" />.
+          <para>
+            <b>Important:</b> This parameter is not intended to serve as a security boundary. 
+            Using <c>unsafeOption</c> should not be considered a substitute for proper security practices.
+          </para>
+        </param>
         <param name="engine">A reference to the scripting engine to use to evaluate <paramref name="source" />.</param>
         <summary>Evaluates the specified JScript code by using the specified engine and safety option.</summary>
         <returns>The result of the evaluation. If <paramref name="source" /> is not a string, return value is <paramref name="source" />.</returns>