Document security concerns

Things to consider/note:

- File system loading only
- Dangers of eval and other dynamic code (flag?)
- Arbitrary script insertion
- Psuedo persistent XSS