eval() works for parsing code, but we still need to secure the custom_parser() method and eval()