Updated README.md and added license to composer.json

- Set it to MIT as I think that should the most permissive of the ones suggested at https://getcomposer.org/doc/04-schema.md#license

Author: Svish

README.md

@@ -42,6 +42,13 @@ And then add a `proxy.php` like this to your web application:
 
 ```
 
+Security
+---
+
+As a simple sanity check the proxy will that the `Referer` header is set and that the hostname is the same as for the proxy. This can be easily spoofed of course, so you should also add entries to the whitelist array.
+
+If the whitelist array is empty, any requests will be accepted.
+
 
 Usage
 ---

composer.json

@@ -2,6 +2,7 @@
     "name": "geekality/php-cross-domain-proxy",
     "description": "Simple PHP proxy for proxying cross-domain ajax requests.",
     "keywords": ["php-cross-domain-proxy","cross-domain", "http", "proxy", "javascript", "ajax"],
+    "license": "MIT",
     "support": {
         "issues": "https://github.com/Svish/php-cross-domain-proxy/issues",
         "source": "https://github.com/Svish/php-cross-domain-proxy"