fix security issue (thank to Zerdoumi for reporting it)

fix security issue (thank to Zerdoumi for reporting it)