Comment by socketcluster

But the summary is likely to summarise out the details which makes the code vulnerable.