fixed security issue of task execution from frontend controller #27