fixed possible _next vulnerability