[SECURITY] Disallow insecure deserialization for l18n_diffsource