Comment on Include defenses against BREACH and other TLS attacks in Drupal core