_content/doc/security: decision: excessive resource consumption

O(n^2) CPU or memory usage, basically a panic.

Change-Id: Ia7f6769a32d02ebd1f9c84b3976d51cf6a6a6964
Reviewed-on: https://go-review.googlesource.com/c/website/+/788868
Auto-Submit: Damien Neil <dneil@google.com>
Reviewed-by: Roland Shoemaker <roland@golang.org>
LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>

_content/doc/security/decisions.md

diff --git a/_content/doc/security/decisions.md b/_content/doc/security/decisions.md
index 9b936e0..224744d 100644
--- a/_content/doc/security/decisions.md
+++ b/_content/doc/security/decisions.md
@@ -56,6 +56,12 @@
 an image *encoder* might be a bug but would not be handled
 as a vulnerability.
 
+### Excessive resource consumption
+
+We generally treat excessive CPU or memory consumption,
+such as a function with a runtime that is O(n²) in terms of its input size,
+as equivalent to a panic.
+
 ## Non-Vulnerabilities
 
 ### Attacker-controlled environment