fixed comments vulnerability