TeXterity treats learner input and custom content as untrusted data. Live formula rendering never invokes a shell, launches an external process, loads arbitrary TeX packages, performs file I/O from LaTeX, or fetches network resources.

Please report security issues privately to the project maintainers. Include the app version, platform, content-pack identifier, and a minimal input that reproduces the problem. Do not include another learner's progress export.