I'm gonna cc @mastahyeti on the security related things. I'm not really sure what could be accomplised, but I worry about trusting user input.