Documents, themes and data reach this SDK from the network, so the SDK treats all of them as untrusted input; what that means in practice is described in HARDENING.md.

If you believe you have found a vulnerability, write to contact@hotlayout.com. Please do not open a public issue for it. We confirm receipt within two working days and agree on a disclosure date with you.