fix vulnerability

should be limited to the localhost