prevent injection (precompile)