Update SECURITY.md

Author: mde

SECURITY.md

@@ -26,7 +26,17 @@ EJS is effectively a JavaScript runtime. Its entire job is to execute JavaScript
 In short, DO NOT send reports including this snippet of code:
 
 ```javascript
+const express = require('express');
+const app = express();
+const PORT = 3000;
+app.set('views', __dirname);
+app.set('view engine', 'ejs');
+
 app.get('/', (req, res) => {
     res.render('index', req.query);
 });
+
+app.listen(PORT, ()=> {
+    console.log(`Server is running on ${PORT}`);
+});
 ```