[security] update hertzbeat security model

home/docs/help/security_model.md

@@ -30,6 +30,10 @@ Apache HertzBeat supports users to upload custom code plugins to run in the life
 
 Apache HertzBeat supports users to customize collectors to personalize the collection of monitoring indicators, and users need to ensure the security of the custom collectors themselves.
 
+## Custom URL and Other Parameter Security
+
+Apache HertzBeat provides the ability to configure custom parameters. All users authorized to configure URLs and other parameters are considered highly trusted and are expected to trigger certain behaviors.
+
 ## Security Constraints in Other Customizations
 
 Apache HertzBeat provides a variety of system extension methods and custom capabilities. Users need to pay attention to the security of customizations during use. Of course, all extension capabilities need to be within the scope of authenticated users.

home/i18n/zh-cn/docusaurus-plugin-content-docs/current/help/security_model.md

@@ -30,6 +30,10 @@ Apache HertzBeat 支持用户上传自定义代码插件在多个系统的生命
 
 Apache HertzBeat 支持用户自定义采集器来个性化采集监控指标等，用户需要自行保证自定义采集器的安全性。
 
+## 自定义URL等参数安全
+
+Apache HertzBeat 提供自定义参数配置能力，所有被授权配置 URL 等参数的用户都被认为是高度信任的，并且期望他们可以触发某些行为。
+
 ## 其它自定义下的安全约束
 
 Apache HertzBeat 提供多种系统扩展方式和自定义能力，用户在使用过程中需注意自定义的安全性。当然所有扩展能力都是需在认证用户范围。