added comment for security flaw
small edit