From dcfe5b6ae394e229e2ebe4dcc3629c85d7cd6d0f Mon Sep 17 00:00:00 2001
From: Rich Slogar <rslogar@google.com>
Date: Wed, 10 Dec 2014 17:10:55 -0800
Subject: docs: gradle wrapper security note

b/18709289

Change-Id: Idb179c5426f3e6a6b7d80dbfba6097ed0ecacc86
---
 docs/html/tools/building/plugin-for-gradle.jd | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docs/html/tools/building/plugin-for-gradle.jd b/docs/html/tools/building/plugin-for-gradle.jd
index b479ed889892..fde034a57a5d 100644
--- a/docs/html/tools/building/plugin-for-gradle.jd
+++ b/docs/html/tools/building/plugin-for-gradle.jd
@@ -320,6 +320,9 @@ logic inside Gradle build files instead.</p>
 <p>You can run the shell scripts to build your project from the command line on your development
 machine and on other machines where Android Studio is not installed.</p>
 
+<p class="caution"><strong>Caution:</strong> When you create a project, only use the Gradle wrapper
+scripts and JAR from a trusted source, such as those generated by Android Studio. /p>
+
 
 <h2 id="buildVariants"> Build variants</h2>
 
-- 
cgit v1.2.3-59-g8ed1b