another xcross security exception ~~