some security hot fix

some security hot fix