security issue work around