At the moment any code can be inserted into the text fields and executed upon parsing. That is NO good.