fix security flaw