How do you prevent RCEs

How do you prevent RCEs in your Cockpit instance.