fix self inflicted ajax DoS attack