SECURITY.md support

[p4p1]

I saw that this repository doesn't have a SECURITY.md file for submitting potential vulnerabilities on the application and security advisories. I've been using the app and I discovered something that might be useful in fixing a jquery bug I'd like to help out in this but I can't find any resources for disclosing my research I also have a few Ideas on how to fix them. Here is the github documentation on adding a security policy: https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository