[1.6.x] Added a warning regarding risks in serving user uploaded media.

Thanks Preston Holmes for the draft text.

Backport of df6760f12c from master