security update for dynamic css