diff --git a/UPGRADING.md b/UPGRADING.md
index 7d3ad124..559f674d 100644
--- a/UPGRADING.md
+++ b/UPGRADING.md
@@ -9,7 +9,18 @@ High impact changes
 - Please check the most recent `data.php` config file and change yours accordingly
 - The `Cast` interface now has a `$context` argument in the `cast` method
 - The `RuleInferrer` interface now has a `RulesCollection` argument instead of an `array`
-- By default, it is now impossible to include/exclude properties using a request parameter. This can be manually overwritten.
+- By default, it is now impossible to include/exclude properties using a request parameter until manually specified. This behaviour can be overwritten by adding these methods to your data object:
+```php
+    public static function allowedRequestIncludes(): ?array
+    {
+        return null;
+    }
+
+    public static function allowedRequestOnly(): ?array
+    {
+        return null;
+    }
+```
 - The `validate` method on a data object will not create a data object after validation, use `validateAndCreate` instead
 - `DataCollection` is now being split into a `DataCollection`, `PaginatedDataCollection` and `CursorPaginatedDataCollection`