[fix] project index security problems, 2