fix security issue