--- CBOR-XS/XS.pm	2013/11/30 18:42:27	1.32
+++ CBOR-XS/XS.pm	2013/12/01 14:30:52	1.33
@@ -244,6 +244,31 @@
 This option does not affect C<decode> in any way - string references will
 always be decoded properly if present.
 
+=item $cbor = $cbor->validate_utf8 ([$enable])
+
+=item $enabled = $cbor->get_validate_utf8
+
+If C<$enable> is true (or missing), then C<decode> will validate that
+elements (text strings) containing UTF-8 data in fact contain valid UTF-8
+data (instead of blindly accepting it). This validation obviously takes
+extra time during decoding.
+
+The concept of "valid UTF-8" used is perl's concept, which is a superset
+of the official UTF-8.
+
+If C<$enable> is false (the default), then C<decode> will blindly accept
+UTF-8 data, marking them as valid UTF-8 in the resulting data structure
+regardless of whether thats true or not.
+
+Perl isn't too happy about corrupted UTF-8 in strings, but should
+generally not crash or do similarly evil things. Extensions might be not
+so forgiving, so it's recommended to turn on this setting if you receive
+untrusted CBOR.
+
+This option does not affect C<encode> in any way - strings that are
+supposedly valid UTF-8 will simply be dumped into the resulting CBOR
+string without checking whether that is, in fact, true or not.
+
 =item $cbor = $cbor->filter ([$cb->($tag, $value)])
 
 =item $cb_or_undef = $cbor->get_filter