Added comments for security.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@13441 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/ERP5/Tool/ContributionTool.py

@@ -341,7 +341,7 @@ class ContributionTool(BaseTool):
     uid = str(id).split('-')[-1]
     object = self.getPortalObject().portal_catalog.unrestrictedGetResultValue(uid=uid)
     if object is not None:
-      return object.getObject()
+      return object.getObject() # Make sure this does not break security. XXX
 
     # Fallback to default method
     if default is _marker: