Are ECharts safe for untrusted user input?