Add security considerations about injection attacks

[cabo]

We wanted to add examples, but maybe we can merge this as is. Marking as ready for review.