more api rants

diff --git a/README b/README
index c057c0ca789f7377a8a03f10396d948108b31299..f13d0b4cc54836365e7e92c53a4d6f4014a136c8 100644 (file)
--- a/README
+++ b/README
@@ -39,6 +39,7 @@ API gaps TeamCity:
  - Tools server extension: 
    - no way to provide own UI
    - no way to implement custom downloader
+   - user may tweak download url to download malicious file instead of expected one => checkes required
 
 API gaps NuGet:
  - Allow to call nuget.exe with plugins without installing them into %USERPROFILE%