README.md in cuba-api-0.2.0 vs README.md in cuba-api-0.3.0

- old
+ new
@@ -5,9 +5,14 @@
 * [![Dependency Status](https://gemnasium.com/mkristian/cuba-api.png)](https://gemnasium.com/mkristian/cuba-api)
 * [![Code Climate](https://codeclimate.com/badge.png)](https://codeclimate.com/github/mkristian/cuba-api)
 
 these are just a handful for [cuba](https://github.com/soveran/cuba) to use cuba as API server.
 
+security
+--------
+
+cuba-api installs the **safe_yaml** gem and will use it when you accept yaml input. installing **safe_yaml** is a bit invasiv, but better be on the safe side of things.
+
 cuba\_-api/config.rb
 ------------------
 
 this plugin adds configuration to cuba which inherits from its superclass. this is very similar to `Cuba.settings`.
 