Trying Codiad I found the marketplace doesn't have any control on the input
* description removed by daeks*
Thanks for your report and effort. I will test that later.
I have removed most of the description of this PR as there is no need to describe a security gap in a public channel.
This PR seems to have more influence on Codiad as I have seen. Currently reverted. #898