From c0401802035d154daabe7156e666239102386c57 Mon Sep 17 00:00:00 2001
From: Eslam Salem <eslam@shieldfy.com>
Date: Wed, 13 Apr 2022 04:46:40 +0200
Subject: [PATCH] Update README.md

Update the readme to add the security note
---
 README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README.md b/README.md
index 009809c1..0dcb676b 100644
--- a/README.md
+++ b/README.md
@@ -55,6 +55,9 @@ for all the passed options. However, be aware that your code could break if we
 add an option with the same name as one of your data object's properties.
 Therefore, we do not recommend using this shortcut.
 
+### Important
+You should never give end-users unfettered access to the EJS render method, If you do so you are using EJS in an inherently un-secure way. 
+
 ### Options
 
   - `cache`                 Compiled functions are cached, requires `filename`