changed canvas to private, for added security