fixed: strict security enforcement in filter