fixed security issue in version 1.0.4