Just recovering from a helpful user who launched a web security scanner at my site and found 5 "issues", none of which were a security issue. But by opening public security tickets you cause a lot of work for a project, since we can't just close those & people start to worry if you ignore them. Please think twice before opening security issues if you aren't sure what they mean & you just copied them from a random site. Feel free to send an email before raising the alarm.