This shows, in a very public way, a bunch of instances where code explicitly allows for arbitrary code execution (a security no-no.)