Fix security bug