[bawolff]

Even in cases where malicious input could be hit, this bug class is stupid on the client side where the attacker can only attack themselves.

[xyzzy123]

Stored... ReDoS, reflected... ReDoS(??)... [it pained me to type those] (╯°□°)╯︵ ┻━┻