Is there a security issue if a malicious NFO file contains a string such as "`</PRE>`" and then continues to do some unwanted things?