Readme update with security policy

Author: codehippie1

docs-website/docs/features/security.md

@@ -313,3 +313,34 @@ cspNonce = 'your-random-nonce'; // Must match CSP policy
 :::tip
 The viewer is CSP-compliant by default. You only need the `cspNonce` input when using `customCSS` with strict CSP policies.
 :::
+
+## 🚨 Reporting Security Vulnerabilities
+
+We take security seriously and encourage responsible disclosure of security vulnerabilities.
+
+### 🔒 Private Vulnerability Reporting
+
+**Please do NOT report security vulnerabilities through public GitHub issues, discussions, or pull requests.**
+
+Instead, please report security vulnerabilities privately by:
+
+- **📧 Email**: [[email protected]](mailto:[email protected])
+- **🔒 GitHub Security**: [Report a vulnerability](https://github.com/intbot/ng2-pdfjs-viewer/security/policy)
+- **📋 Security Policy**: [Full Security Policy](https://github.com/intbot/ng2-pdfjs-viewer/security/policy)
+
+### 📝 What to Include
+
+When reporting a vulnerability, please include:
+
+- **Description**: Clear description of the vulnerability
+- **Steps to Reproduce**: Detailed steps to reproduce the issue
+- **Impact Assessment**: Potential impact and affected components
+- **Environment**: Browser, Angular version, ng2-pdfjs-viewer version
+- **Proof of Concept**: If applicable, include a minimal reproduction case
+- **Suggested Fix**: If you have ideas for a fix, please share them
+
+### 🏆 Security Hall of Fame
+
+We recognize security researchers who help improve ng2-pdfjs-viewer security. Contributors will be acknowledged in our security policy and documentation.
+
+For complete security guidelines and reporting procedures, see our [Security Policy](https://github.com/intbot/ng2-pdfjs-viewer/security/policy).

lib/README.md

@@ -939,6 +939,18 @@ This project is licensed under the **Apache License 2.0 + Commons Clause License
 <div align="center">
 
 
+## 🔒 Security
+
+I take security of this library seriously. If you discover a security vulnerability, please report it privately:
+
+- **🔒 Private Reporting**: [Security Policy](https://github.com/intbot/ng2-pdfjs-viewer/security/policy)
+- **📧 Email**: [[email protected]](mailto:[email protected])
+- **⚠️ Please do NOT** report security issues through public GitHub issues
+
+For security best practices and vulnerability reporting guidelines, see our [Security Policy](https://github.com/intbot/ng2-pdfjs-viewer/security/policy).
+
+---
+
 [![GitHub](https://img.shields.io/badge/GitHub-Repository-blue?logo=github)](https://github.com/intbot/ng2-pdfjs-viewer)
 [![NPM](https://img.shields.io/badge/NPM-Package-red?logo=npm)](https://www.npmjs.com/package/ng2-pdfjs-viewer)
 [![Angular](https://img.shields.io/badge/Angular-Component-green?logo=angular)](https://angular.dev/overview)