fix vuln in convo sidebar