Add XSS warning to README.