[#2212] Adding a note about JSON hijacking