Fix security issue with SOAP API.