Are these potentially vulnerable to code injection?