bugfix: tainted input