Add security notice about Tooltip's content

docs/api/javascript/ui/tooltip.md

@@ -184,6 +184,8 @@ Defines the animation duration.
 The text or a function which result will be shown within the Tooltip.
 By default the Tooltip will display the target element title attribute content.
 
+> If the content passed to the Tooltip includes scripts, they will be executed. If this is not desired, make sure to strip any undesired content in advance.
+
 #### Example - extract the content from target element content
 
     <div id="container">

docs/web/tooltip/overview.md

@@ -70,8 +70,8 @@ Among the properties that can be controlled:
 
 ## Loading Tooltip content via AJAX
 
-A **Tooltip** provides built-in support for asynchronously loading content from a URL. This URL
-should return a HTML fragment that can be loaded in a Tooltip content area.
+A **Tooltip** provides built-in support for asynchronously loading content from a URL. This URL should return a HTML fragment that can be loaded in a Tooltip content area.
+If the content passed to the Tooltip includes scripts, they will be executed.
 
 ### Load Tooltip content asynchronously
 
@@ -87,7 +87,6 @@ should return a HTML fragment that can be loaded in a Tooltip content area.
 
 ## Accessing an Existing Tooltip
 
-
 You can reference an existing **Tooltip** instance via
 [jQuery.data()](http://api.jquery.com/jQuery.data/). Once a reference has been established, you can
 use the API to control its behavior.
@@ -96,4 +95,3 @@ use the API to control its behavior.
 
     var tooltip = $("#target").data("kendoTooltip");
 
-