Custom decoders are executable code. While enabled, they can read parsed inputs and access the network. Only add a decoder you created or fully trust.