The script also triggers an AJAX request, which leads to many security issues (see the HTML help). I've disabled this script at all, but probably there could be a better solution