fix path not secure