parseHTML: Add security warning, closes gh-59