the http filter was added
fix security