added note about defensive string copying