Security quiz: as an attacker, what could you exploit in this Drupal sandbox module? https://www.drupal.org/node/2437511