Update notes for submitted changes

* allow disabling file injection completely