> It is a well documented security concern

A reference would be appreciated.