fix security for editor & file manager