url security issue has been fixed