Add security advisory to package description (#320)

Context: #319
haskell-unordered-containers · Oct 1, 2021 · 3d9efe3 · 3d9efe3
1 parent 6588174
commit 3d9efe3
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/unordered-containers.cabal b/unordered-containers.cabal
@@ -8,6 +8,13 @@ description:
   .
   The declared cost of each operation is either worst-case or
   amortized, but remains valid even if structures are shared.
+  .
+  /Security/
+  .
+  This package currently provides no defenses against hash collision attacks
+  such as HashDoS.
+  Users who need to store input from untrusted sources are advised to use
+  @Data.Map@ or @Data.Set@ from the @containers@ package instead.
 license:        BSD3
 license-file:   LICENSE
 author:         Johan Tibell