Documents, themes and data reach this SDK from the network, so the SDK treats all of them as untrusted input; what that means in practice is described in HARDENING-REVIEW.md.

If you believe you have found a vulnerability, write to [email protected]. Please do not open a public issue for it. We confirm receipt within two working days and agree on a disclosure date with you.