Bug and security issue in the form designer