fixed a security issue
2.1.2