diff --git a/config/_default/config.toml b/config/_default/config.toml
index ef56574..8a359e0 100644
--- a/config/_default/config.toml
+++ b/config/_default/config.toml
@@ -52,3 +52,11 @@ theme = "hugo-hero-theme"
 #[permalinks]
 #  post = "/:year/:month/:day/:slug/"
 #  pages = "/:filename/"
+
+[security]
+  enableInlineShortcodes = false
+  [security.exec]
+    allow = ['^dart-sass-embedded$', '^go$', '^npx$', '^postcss$']
+    osEnv = ['(?i)^(PATH|PATHEXT|APPDATA|TMP|TEMP|TERM)$']
+  [security.funcs]
+    getenv = ['^(GITHUB_REF|DRONE_COMMIT_REF|HUGO_)']
diff --git a/themes/hugo-hero-theme b/themes/hugo-hero-theme
index 9a583df..c3feb99 160000
--- a/themes/hugo-hero-theme
+++ b/themes/hugo-hero-theme
@@ -1 +1 @@
-Subproject commit 9a583dfde59abb96b864eaf8e290891d085e1b93
+Subproject commit c3feb996a9d993e26b4fafa80af47c820c7c2809