addressed additional vulnerabilities on user input and during file import