diff --git a/monero_utils/MyMoneroCoreBridge.js b/monero_utils/MyMoneroCoreBridge.js
index a5f34a7..a2ade1c 100644
--- a/monero_utils/MyMoneroCoreBridge.js
+++ b/monero_utils/MyMoneroCoreBridge.js
@@ -727,7 +727,7 @@ module.exports = function(options)
 			// TODO: verify content - for now, relying on same-origin and tls/ssl
 			var Module = {}
 			try {
-				eval(content) // emscripten also does an eval
+				eval(content) // I do not believe this is a safety concern, because content is server-controlled; https://humanwhocodes.com/blog/2013/06/25/eval-isnt-evil-just-misunderstood/
 			} catch (e) {
 				reject(e)
 				return
diff --git a/monero_utils/monero_utils.js b/monero_utils/monero_utils.js
index 25a58a0..22642db 100644
--- a/monero_utils/monero_utils.js
+++ b/monero_utils/monero_utils.js
@@ -116,7 +116,7 @@ const moneroUtils_promise = new Promise(function(resolve, reject)
 				hasWebAssembly = false // to be clear
 			}
 			use_asmjs = hasWebAssembly != true
-		}	
+		}
 		console.log("Using wasm: ", !use_asmjs)
 		const coreBridgeLoading_promise = require('./MyMoneroCoreBridge')({ asmjs: use_asmjs });
 		coreBridgeLoading_promise.catch(function(e)