parseHTML: Add security warning, closes gh-59

I think this documents it enough.