C-sharp : Unsafe external file inclusion in HTML