Security considerations when parsing user-provided INI strings and files