add a new tag: create
do not rely on self._source (security hole)