RT#6226: security fix for customer notes