- Update TODO.md for security bugs et al
- Add a "SECURITY WARNING" section in farabi documentation
- more code todos for ack command line injection