- do not execute code which comes from untrusted sources