Important security note on bookmarklets