Add security considerations and best practices for processing XML and YAML, including examples and detailed mitigations against XXE and RCE vulnerabilities. Introduce new security documentation sections for serialization formats and updated threat model.

[Splatcrafter]

Summary

This PR adds security documentation for safe guidance through configuring input parsers for JSON, YAML and all other formats.

Type of Change

• Bug fix
• New feature
• Breaking change
• Refactoring
• Documentation
• Build / CI

Related Issues

Closes #40 - [Feature]: Security Documentation for Untrusted Data

Changes

• added documentation for security configuration

Verification

• Unit tests added/updated
• Existing tests pass
• Manual verification performed (if applicable)

Breaking Changes

No breaking changes were made in this PR.

Checklist

• Code follows project conventions
• Public APIs are documented
• Tests cover new behavior
• No unnecessary dependencies added

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None