fix: update object security at request validation #1707