From 473f9f8884458f39fbb993bf39921c4a9c1dc841 Mon Sep 17 00:00:00 2001
From: Franck Nijhof <git@frenck.dev>
Date: Tue, 21 Jan 2020 17:48:12 +0100
Subject: [PATCH] Add note about hosting files in www folder (#11834)

---
 source/_integrations/http.markdown | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/source/_integrations/http.markdown b/source/_integrations/http.markdown
index 40f759fc2a4..81ebaf9d5c5 100644
--- a/source/_integrations/http.markdown
+++ b/source/_integrations/http.markdown
@@ -162,6 +162,12 @@ If you want to use Home Assistant to host or serve static files then create a di
 
 </div>
 
+<div class='note warning'>
+
+  Files served from the `www`/`local` folder, aren't protected by the Home Assistant authentication. Files stored in this folder, if the URL is known, can be accessed by anybody without authentication.
+
+</div>
+
 ## Binary Sensor
 
 The HTTP binary sensor is dynamically created with the first request that is made to its URL. You don't have to define it in the configuration first.