encoding.go | 13 2 + 11 - 0 !
encoding_test.go | 11 11 + 0 - 0 !
parser_test.go | 13 1 + 12 - 0 !
3 files changed, 14 insertions(+), 23 deletions(-)

 fix insecure decoding of content. 
Use decoder.Bytes() to decode encoded content instead
of insecure custom logic.