[_cbsz]

See the FAQ. It is unable to tell if a form submitted by JavaScript is in fact submitted securely, so it warns.