changed in this diff outside the diff untrusted input question pinned here