[MadcapJake]

when the platform is itself about RCE... I think you have to evaluate what specific dangerous code can be executed before you start lighting the torches.