fixed security issue with dolist item editing