fix 4412 security issue