security fix, thanks to anton for noticing it