disable changing the source information by the controller, make #312 more secure