Update README.md to include warning about RCE

README.md

@@ -109,6 +109,10 @@ end
 
     IO.puts "total count: #{metadata.total_count}"
     ```
+## Security Considerations
+
+`Repo.paginate/4 will throw an ArgumentError should it detect an executable term in the cursor parameters passed to it (```before`````, `````after`````).
+This is done to protect you from potential side-effects of malicious user input, see [TODO: Add link to relevant paginator_test.exs].
 
 ## Indexes