fix for XML security problem