[SECURITY] Prevent editor controlled hmac content