CGI: securing flush