Updated comments to include concerns about cross site security.