Fix security issue allow user to download folder.