On the \#relatorio channel\, titou pointed that Genshi is not a sandboxed template engine\. \ Because Genshi uses the Python eval to execute the template directives\, I think we should not allow to upload new template from the network by default\. \ I don\'t want to remove this feature because in many cases it is useful and pretty sure when self hosted \(only admin user can do\)\. \ So the idea will be to have a parameter in the configuration file to activate the feature \(which will be activated by default on neso\)\. \ \ Another possibility could be to change Relatorio to use Jinja instead of Genshi because Jinja has a sandboxed mode\.