Drupal Custom Formatters Vulnerabilities