Update PSR compliance documentation

Author: nyamsprod

docs/uri/7.0/psr-compliance.md

@@ -119,6 +119,19 @@ echo (string) Uri::new('http://example.com/path/to?#');
 
 <p class="message-info">This improved compliance is available since version <code>7.5.0</code></p>
 
+Because `PSR-7` UriInterface implementing object `getPath` may be used in
+header. A security issue may rise if the path is not stripped of multiple starting `/`. 
+As such, `getPath` yield a different result depending on its raw value:
+
+~~~php
+$uri = Http::new('https://example.com///miscillaneous.tld');
+echo (string) $uri;
+// returns 'https://example.com///miscillaneous.tld'
+
+echo $uri->getPath();
+// returns '/miscillaneous.tld' the extra leading slashes are removed
+~~~
+
 ## PSR-17 compatibility
 
 The package also provides an implementation of the `UriFactoryInterface` from [PSR-17](https://www.php-fig.org/psr/psr-17/)