Security concern. hyperlink BUG