Hello Team,
After a security audit, we found that the layout add-in has a “command” widget which allows commands to be created and executed at the operating system level. This may allow an attacker to inject code and execute it remotely.
Is’t possible to remove the functionality for creating custom commands and keep only pre-configured commands in the widget?