security considerations drafted by Harald

see also https://www.w3.org/Bugs/Public/show_bug.cgi?id=20806
s/ a browser/ the same browser/