Index: htdocs/docs/install.html
===================================================================
RCS file: /sources/public/validator/htdocs/docs/install.html,v
retrieving revision 1.10
diff -u -r1.10 install.html
--- htdocs/docs/install.html	9 Jan 2005 19:46:19 -0000	1.10
+++ htdocs/docs/install.html	27 Apr 2005 15:14:01 -0000
@@ -78,6 +78,10 @@
         The SGML parser we're currently using is <code>OpenSP 1.5</code>,
         which can be found on the
         <a href="http://openjade.sourceforge.net/">OpenJade home page</a>.
+        Do <em>not</em> try to run the Validator with an earlier than 1.5
+        version of OpenSP.  It will not work.  If one hacks it to "work"
+        with such a version, a potential security hole will also open.
+        Just use OpenSP 1.5 or later.
       </p>
 
       <h5>Perl Modules</h5>
Index: httpd/cgi-bin/check
===================================================================
RCS file: /sources/public/validator/httpd/cgi-bin/check,v
retrieving revision 1.414
diff -u -r1.414 check
--- httpd/cgi-bin/check	9 Apr 2005 17:31:42 -0000	1.414
+++ httpd/cgi-bin/check	27 Apr 2005 15:14:02 -0000
@@ -595,6 +595,10 @@
   #
   # By default, use SGML catalog file and SGML Declaration.
   my $catalog  = File::Spec->catfile($CFG->{Paths}->{SGML}->{Library}, 'sgml.soc');
+  #
+  # Note: if you feel the urge to remove -R from here, please understand that
+  # doing so opens a potential security hole.  Don't do that.  OpenSP versions
+  # 1.5 and later recognize the -R option.
   my @spopt = qw(
                  -R
                  -wvalid