diff --git a/lib/normalize.coffee b/lib/normalize.coffee
index 1f0bc36..290a4b4 100644
--- a/lib/normalize.coffee
+++ b/lib/normalize.coffee
@@ -20,6 +20,9 @@
 # THE SOFTWARE.
 ###
 
+# Credit to Netanel Rubin from Check Point Software Technologies for discovering
+# vulnerability caused by use of eval to generate regex from user input.
+
 common = require './common'
 parameters = require './parameters'