Add "Untrusted User Input" section to README