fix format security errors