An inclusion of web functionality from an untrusted source could allow remote code execution on SpaceCom
CWE-830