Add security note to SetRemoteStackTrace

Author: GrabYourPitchforks

xml/System.Runtime.ExceptionServices/ExceptionDispatchInfo.xml

@@ -178,9 +178,14 @@ This method populates the <xref:System.Exception.StackTrace> property from an ar
              allowing preservation of the exception object's stack trace information. .NET does not attempt to parse the
              provided string value.
             
-             The caller is responsible for canonicalizing line endings if required. <xref:System.String.ReplaceLineEndings>
+The caller is responsible for canonicalizing line endings if required. <xref:System.String.ReplaceLineEndings>
              can be used to canonicalize line endings.
 
+If the caller provides untrusted input to this API, this may result in the exception's stack trace containing
+             embedded null characters, reserved HTML or JSON characters, or other unexpected values. Applications that
+             display an exception's details to the user should always take care to encode the exception information at the
+             point where it is displayed.
+
           ]]></format>
         </remarks>
         <exception cref="T:System.ArgumentNullException">The <paramref name="source" /> or <paramref name="stackTrace" /> argument was <see langword="null" />.</exception>