Fix security report
https://hackerone.com/reports/7736