Added link to list.py.
Added a comment about injection attacks.